Slashdot Mirror

← Back to Stories (view on slashdot.org)

SirCam on Linux via WINE

Posted by CmdrTaco on from the great-leaps-forward-in-emulator-technology dept.

illusion_2K writes "Another monumental step forward for Linux - the SirCam virus now works on Linux via WINE. ("With a few ommissions")" Allright I had to post it. Thats damn funny. We can emulate worms if we want to!

2 of 194 comments (clear)

  1. Makes perfect sense to me... by Ungrounded+Lightning · · Score: 5, Insightful
    My original point (which has been moderated into oblivion, as I assume this will be too) is that it doesn't make ANY rational sense to be trying to get a MALICIOUS program running on your system.

    It makes perfect sense to me, with a couple of changes of emphasis.

    It makes sense, when writing an emulator/compatability layer, to TEST whether a malicious program will run, for two reasons:

    Discovering whether the emulation is close enough that the emulator is also vulnerable to the malicious software.

    Discovering whether the malicious software fails because it depends on a feature - necessary for some NON-malicious programs - which is not correctly emulated. (A malicious program may use a little-known or undocumented "feature" - perhaps one that's been keeping some popular apps from working correctly.)

    But beyond debugging the emulation there are additional reasons:

    Running the malicious program in the (open-source) emulation environment may provide additional insight into its operation, leading to better defenses, both for the emulation and the original environment.

    It's FUNNY!

    That's four separate reasons that this makes sense.

    --
    Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
  2. what to reply to a dork who sends you sircam by zyqqh · · Score: 4, Insightful

    here's my form letter for replying to addresses i get sircam clones from:

    +++
    Subject: advice

    Hi! How are you?

    I send you this advice in order to not have your files

    See you later. Thanks
    +++
    Attachment (named advice.txt.bat):

    @echo off

    echo Your computer is infected with the "sircam" virus, and has been
    echo repeatedly emailing addresses on hkn.eecs.berkeley.edu
    echo with large attachments. Please clean up the virus ASAP.
    echo You can find more information on how to do this at:
    echo http://www.sarc.com/avcenter/venc/data/w32.sircam. worm@mm.html

    :Loop
    goto Loop

    --
    // zyqqh