Sophos

Sophos blogs

Linux/Cheese

Aliases
  • Cheese
  • Linux.Cheese.Worm
Category
Type
What to do
Prevalence low high

Summary

 
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Linux/Cheese is a Linux worm which claims to be a "good virus". However, like other attempts before it, it fails and is an unwanted nuisance.

Linux/Cheese will only affect Linux systems previously infected with the Linux/Lion worm. When a machine is infected by Linux/Cheese it will extract the worm to the /tmp/.cheese directory. It will then blank any lines in /etc/inetd.conf which contain the text /bin/sh. (A line containing this text is added as a backdoor when a computer is infected with Linux/Lion.)

The worm will then scan for other computers with the backdoor left open by Linux/Lion.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer