Rike

Rike
Type	File virus
Creator
Date Discovered	2003
Place of Origin
Source Language
Platform	Linux
File Type(s)
Infection Length	1,627 bytes
Reported Costs

Rike is a Linux virus from 2003. It is almost entirely non-dangerous with no payload of any kind. It was written in x86 Assembly.

When executed, Rike searches for ELF files in the current directory to infect. It uses the sys call Int 80h to obtain services from the Linux kernel. The virus scans sections with the attribute SHT_PROGBITS and increases the size of the last section, writing itself to the free space.

It then writes a jump command to its entry point address. Finally, it writes its label to the ELF header, including the string "RIKE".

Sources

Spyware32. Linux.Rike.162 Viruses Information.