here something that was posted to bugtraq today. i ay be of some interest. :-)
~kurth
>Approved-By: [EMAIL PROTECTED]
>Delivered-To: [EMAIL PROTECTED]
>Delivered-To: [EMAIL PROTECTED]
>X-Originating-IP: [195.122.15.37]
>X-Mailer: Microsoft Outlook Express 5.00.2615.200
>Date: Sat, 22 Apr 2000 01:52:51 +0300
>Reply-To: dEStr0YEr <[EMAIL PROTECTED]>
>Sender: Incidents Mailing List <[EMAIL PROTECTED]>
>From: dEStr0YEr <[EMAIL PROTECTED]>
>Subject: !!!Linux ELF infector!!!
>X-To: [EMAIL PROTECTED]
>To: [EMAIL PROTECTED]
>
>Hi there!
>
> Well, f0lks, this is a small(maybe simple) infect0r, which
> has been written only for pr0be, I mean that this infect0r
> is begin!!! T0 be continue...
> Infector works properly only with *.s-n files s0rryyyy :(
> but it works!!! And we almost have written complete virus for Linux.
> By the way, coming soon! ;)
> S0rry for this assem, particularly for file c0py ;) And please,
> close your eyes 0n 0ptimization, Virus is comming and it will s0lve all!
>
> P.S. We're waiting all your suggestion
> and info, which can help us to complete it, because
> we have enough ideas but haven't informati0n
>
> Is anybody who want coding with us? If so, then
>[EMAIL PROTECTED]
>
>
>
>
macroses.inc
main.s