Details
Linux.Rike.1627
Rike is a non-dangerous nonmemory resident parasitic virus. It searches for Linux executable files in the current directory, then writes itself to the middle of the file. It's size is 1627 bytes and is written in the Assembler programming language.
The Rike virus uses low level Linux functions when working with files: SYS CALLS INT 80h. While infecting a file the virus scans sections with the attribute SHT_PROGBITS. Rike increases the size of the last section and writes itself to the free space. Next, the virus inserts a Jump command to the Entry Point address.
The virus writes its label to the ELF header. The label is the string "RIKE".
