Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 28 Mar 2001 21:40:21 +0000 (GMT)
From:      Terry Lambert <tlambert@primenet.com>
To:        bostergaard@siticom.com (=?iso-8859-1?Q?Bryan_=D8sterg=E5rd?=)
Cc:        tlambert@primenet.com ('Terry Lambert'), chat@FreeBSD.ORG, rsidd@physics.iisc.ernet.in
Subject:   Re: Virus targetting both Windows and Linux?
Message-ID:  <200103282140.OAA12301@usr02.primenet.com>
In-Reply-To: <C3CC10B4E6D5D411B21D00508BEA25D40142FF@EXCHANGE-TMP> from "=?iso-8859-1?Q?Bryan_=D8sterg=E5rd?=" at Mar 28, 2001 02:51:00 PM

next in thread | previous in thread | raw e-mail | index | archive | help
> The way this virus works, is as follows:
> 
> It has one Linux ELF image capable of infecting both Linux ELF and Windows
> PE files.
> It has one Windows PE image capable of infecting both Linux ELF and Windows
> PE files.
> 
> This doesn't mean the same file will be able to run under both Windows and
> Linux, quite the contrary.
> So it's simple a Linux program capable of editing (infection) to different
> executable formats, as well as a Windows program capable of the same.
> 
> I hope this explanation clears up any confusion as to the possibility of
> such a virus.

I feel cheated.


> As for spreading, Benny (the author of Winux) thinks that it should be able
> to spread from Linux to Windows, as many users have a FAT (Windows)
> partition mounted, for exchanging data. As far as I know he haven't
> explained how the Windows version of Winux would spread to Linux.

UMSDOSFS?


					Terry Lambert
					terry@lambert.org
---
Any opinions in this posting are my own and not those of my present
or previous employers.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-chat" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200103282140.OAA12301>