Maximize
Bookmark

VX Heaven

Library Collection Sources Engines Constructors Simulators Utilities Links Forum

Source code of computer viruses

Arian - Virus for Linux by herm1t

Virus for Linux

herm1t
Show all viruses by this author

2006-05-24

Comments
Download arian.zip (10857 bytes) or browse online

Released in RRLF#7 magazine

This is the demonstration virus for the arithmetic and LZW compression modules. It infecting files by compressing .text section of the victim. It does not increase victim size. This looks as follows:

  *BEFORE*                    *AFTER*
+-----------+              +------------+
| EHDR      | text segment | EHDR       |
|           |              |            |
|           |              |            |
+ - - - - - +              +- - - - - - + <--EP
| .text     | text se?ion  |   virus    |
|           | <--EP        | compressed |
|           |              | .text | 00 | <-- padding zeroes
+ - - - - - +              +- - - - - -+
|           |              |            |
+-----------+              +------------+
|           | data segment |            |
|           |              |            |
+-----------+              +------------+

By accessing, viewing, downloading or otherwise using this content you agree to be bound by the Terms of Use! vxer.org aka vx.netlux.org