Slashdot Mirror
SirCam on Linux via WINE
illusion_2K writes "Another monumental step forward for Linux - the SirCam virus now works on Linux via WINE. ("With a few ommissions")" Allright I had to post it. Thats damn funny. We can emulate worms if we want to!
When will I be able to enjoy being infected by outlook viruses under FreeBSD? People will think I'm weird if I don't send along personal documents.
One future, two choices. Oppose them or let them destroy us.
Cool! Now for a real coup, alter WINE so that it doesn't have all these vulnerabilities. (Should be reasonably straight-forward, just put proper checks in to keep VB scripts from accessing certain parts of the system.) I can see the marketing now: "Runs all Windows programs, except the viruses!" "It's Windows, but safer." "Virii? We don't run no steenkin virii!"
--GrouchoMarx
Card-carrying member of the EFF, FSF, and ACLU. Are you?
Now, all we need is an Outlook user simulator package that automatically opens executable attachments if it's asked for advice :)
<!-- DHTML / JavaScript menu, popup tooltip, Ajax scripts -->
While I noticed that SirCam infected email did fire my Wine program the results were a dud. The effect was that SirCam was exposed but not functional, and I was able to explore it's code without fear. There were no registries to infect, no exchange list to exploit, and the "hidden" trojans were easily seen and removed.
SirCam it totally harmless on Linux under Wine.
Running with Linux for over 20 years!
I bet this comes up with every wine post, but according to the name, the sourceforge page, and one of the the FAQ answers, WINE is not an emulator. Much like GNU is not UNIX. :)
-Puk
Now even Linux users can enjoy the benefits of the Microsoft Virus Infection Layer in their otherwise high quality operating system.
This is a big step for Linux's acceptance as a Desktop operating system. We NEED more clueless newbies out there using Linux and saying "fuckit, I think there's a virus on your/my system. Time to reinstall KDE."
In a few months even Outlook will be available to Linux/Wine users, so too will be the full Universal Virus Infection suite of tools from Microsoft.
My only question is, how much longer until we have kernel-level support for VBA and Microsoft Scripting?
"Look at me, I invented the stove!" -- Ben Franklin
I just wonder, all those people who advocate suing Microsoft for the SirCam virus, should we now sue the makers of WINE as well?
ok then your [sic] infringing on my copyright! Could you as [sic] me next time before STEALING my comments for your own?
It makes perfect sense to me, with a couple of changes of emphasis.
It makes sense, when writing an emulator/compatability layer, to TEST whether a malicious program will run, for two reasons:
Discovering whether the emulation is close enough that the emulator is also vulnerable to the malicious software.
Discovering whether the malicious software fails because it depends on a feature - necessary for some NON-malicious programs - which is not correctly emulated. (A malicious program may use a little-known or undocumented "feature" - perhaps one that's been keeping some popular apps from working correctly.)
But beyond debugging the emulation there are additional reasons:
Running the malicious program in the (open-source) emulation environment may provide additional insight into its operation, leading to better defenses, both for the emulation and the original environment.
It's FUNNY!
That's four separate reasons that this makes sense.
Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
This has been a known problem for years amongst Mac emulator users. Virtual PC and other emus are suceptible to viruses just like on a native PC. I just run standard PC antivirus tools.
One of the advantages of using Mac PC emulation, I can just make a backup copy of my PC volume, save that state, if I have a Windows problem I just ditch the corrupted volume and use the backup.
The sad thing about Windows bugs is that you don't need to go to the back door to do damage. There's enough to be seen to do it through the front door now.
Maybe SirCam did not work because when the damage was passed down to the underlying OS, Linux did not want to play ball: and isn't that WHY we run emulators.... :)
OS/2 - because choice is a terrible thing to waste.
here's my form letter for replying to addresses i get sircam clones from:
. worm@mm.html
+++
Subject: advice
Hi! How are you?
I send you this advice in order to not have your files
See you later. Thanks
+++
Attachment (named advice.txt.bat):
@echo off
echo Your computer is infected with the "sircam" virus, and has been
echo repeatedly emailing addresses on hkn.eecs.berkeley.edu
echo with large attachments. Please clean up the virus ASAP.
echo You can find more information on how to do this at:
echo http://www.sarc.com/avcenter/venc/data/w32.sircam
:Loop
goto Loop
// zyqqh
The net will not be what we demand, but what we make it. Build it well.
No, the plural of virus is Microsoft.