Discovered: July 2, 2003
Updated: February 13, 2007 12:03:54 PM
Also Known As: Worm.Linux.Sorso.a, Backdoor.Linux.Sorso (AVP)
Type: Worm
Systems Affected: Linux
Once Linux.Sorso attacks a computer, it is difficult to determine what else the computer has been exposed to. In most cases, changes other than those made by the threat will not have occurred. However, the author of the threat may have been able to use the threat to access the computer to make changes to it. Unless you can be absolutely sure that malicious activity has not been performed on the computer, we recommend completely re-installing the operating system.
Writeup By: Yuhui Huang