Linux.Jac.8759

Linux.Jac.8759 is an ELF file infector virus. It will infect up to 201 ELF files in the same directory from which it was executed. Additionally, if an infected executable is run as root, it will also switch to the /bin directory and infect another 201 ELF files there.

OSF also opens a back door to the system which listens for commands on UDP port 3049.

Protection

• Initial Rapid Release version pending
• Latest Rapid Release version August 20, 2008 revision 017
• Initial Daily Certified version pending
• Latest Daily Certified version August 20, 2008 revision 016
• Initial Weekly Certified release date pending

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.