<?xml version="1.0"?>
<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.1.2//EN"
[
<!--  "/usr/share/sgml/docbook/xml-dtd-4.1.2/docbookx.dtd" -->

<!-- configuration and evaluation -->
  <!ENTITY % xml.global SYSTEM "global.xml">
  %xml.global;

  <!ENTITY config.OUT.DEFAULT "i386-redhat7.3-linux">
  <!ENTITY % xml.yref SYSTEM "yref.xml">
  %xml.yref;

<!-- chapter entities -->

  <!ENTITY xml.intro SYSTEM "intro.xml">
  <!ENTITY xml.platforms SYSTEM "platforms.xml">
  <!ENTITY xml.one.step.closer SYSTEM "one.step.closer.xml">
  <!ENTITY xml.scratch SYSTEM "scratch.xml">
  <!ENTITY xml.scanners SYSTEM "scanners.xml">
  <!ENTITY xml.segment.padding SYSTEM "segment.padding.xml">
  <!ENTITY xml.rst SYSTEM "rst.xml">
  <!ENTITY xml.revision.history SYSTEM "revision.history.xml">
  <!ENTITY xml.mirrors SYSTEM "mirrors.xml">

<!-- relative links -->

  <!ENTITY relative.archive "../../archive">
  <!ENTITY relative.nai "../../feedback/de/nai">

]>
<article id="index">

<articleinfo>

  &xml.author;
  <titleabbrev>TEVWH</titleabbrev>
  <subtitle>Introduction</subtitle>

  <!-- 
    post link-time code modification of <acronym>ELF</acronym>
    executables under &config.HOSTTYPE;.
  -->

  <abstract
    ><simpara
      >This document describes how to write parasitic file viruses
      infecting <acronym>ELF</acronym> executables.
      Though it contains a lot of source code, no actual virus is
      included.  Every mentioned infection method is accompanied
      with a practical guide to detection.
    </simpara><simpara
      ><emphasis role="strong">Viruses are not a threat to Linux!</emphasis>
      <footnote><simpara
	>The first release of this document covered only Linux/i386.
	Among the platforms using <acronym>ELF</acronym> it is
	considered the most viable for virus spread.
      </simpara></footnote>
    </simpara><simpara
      >A quote from Rick's Rant on anti-virus software:
      &note.rick.rant.virus;
    </simpara><simpara
      ><emphasis
	>The problem with answering this question is that those asking
	it know only OSes where viruses, trojan-horse programs, worms,
	nasty Java scripts, ActiveX controls with destructive payloads,
	and ordinary misbehaved applications are a constant threat to
	their computing. Therefore, they refuse to believe Linux
	could be different, no matter what they hear. And yet it is. 
      </emphasis>
    </simpara>
  </abstract>

  <revhistory>
    <revision>
      <revnumber>
        <link linkend="&config.revid;">&config.revnumber;</link>
      </revnumber>
      <date>&config.revdate;</date>
      <revremark
        >Fixed embarrassing bug in table of used rpm packages.
      </revremark>
    </revision>
  </revhistory>

</articleinfo>

<sect1 id="intro" xreflabel="Introduction">
  <title>Introduction</title>
  &xml.intro;
</sect1>
<sect1 id="platforms" xreflabel="Platforms">
  <title>Platforms</title>
  &xml.platforms;
</sect1>
<sect1 id="one.step.closer" xreflabel="One step closer to the edge (i)">
  <title>One step closer to the edge (i)</title>
  &xml.one.step.closer;
</sect1>
<sect1 id="scratch" xreflabel="Scratch pad (i)">
  <title>Scratch pad (i)</title>
  &xml.scratch;
</sect1>
<sect1 id="scanners" xreflabel="Scanners (i)">
  <title>Scanners (i)</title>
  &xml.scanners;
</sect1>
<sect1 id="segment.padding" xreflabel="Segment padding infection (i)">
  <title>Segment padding infection (i)</title>
  &xml.segment.padding;
</sect1>
<sect1 id="rst" xreflabel="Remote shell trojan (i)">
  <title>Remote shell trojan (i)</title>
  &xml.rst;
</sect1>

<appendix id="license.FDL" xreflabel="GNU Free Documentation License">
  <title>GNU Free Documentation License</title>
  <!--
   ! 2002-04-11 Alexander Bartolich
   ! A plain mediobject produces unreadable text without
   ! line breaks or paragraps on my RedHat 7.2 setup.
  -->
  <simpara>See &url.fdl; for details and updates.</simpara>
  <programlisting><inlinemediaobject><imageobject><imagedata
    fileref="../FDL.txt"
    format="linespecific"
  /></imageobject></inlinemediaobject></programlisting>
</appendix>

<appendix id="license.GPL" xreflabel="GNU General Public License">
  <title>GNU General Public License</title>

  <simpara>See &url.gpl; for details and updates.</simpara>
  <programlisting><inlinemediaobject><imageobject><imagedata
    fileref="../GPL.txt"
    format="linespecific"
  /></imageobject></inlinemediaobject></programlisting>
</appendix>
<appendix id="revision.history" xreflabel="Revision history">
  <title>Revision history</title>
  &xml.revision.history;
</appendix>
<appendix id="mirrors" xreflabel="Mirrors">
  <title>Mirrors</title>
  &xml.mirrors;
</appendix>

</article>
