# The Linux Virus Writing HOWTO

## post link-time code modification of ELF executables under Linux/i386

### Alexander Bartolich

alexander.bartolich@gmx.at

Copyright © 2002 by Alexander Bartolich

Revision History
Revision When you don't know what you are doing, do it neatly. | 2002-04-18 |
Changed some SGML-tags, A closer look, The entry point and started Suspicious code.

This document describes how to write parasitic file viruses infecting ELF executables on Linux/i386. Though it contains a lot of source code, no actual virus is included. Every mentioned infection method is accompanied with a practical guide to detection.

|  | Next
|  | Introduction