Zipworm is a self-replicating program for Linux that infects zip files. Its infection of zip files along with its ability to work outside of the type of file it infects as an ELF file makes its status as a virus or worm controversial.
When Zipworm is executed, it searches for .zip files in the current directory. It will add a copy of itself there with one of the following names:
- Ten motives why linux sux!
- Why Windows is superior to Linux!
- Is Linux for you? Never!
- Is Linux immune to virus? NO!
Zipworm does not use any .zip file application or any external processing tool. It parses the .zip format and inserts itself into the .zip file. It contains text which is never seen: * elf zip worm vecna.