First (proof-of-concept) .NET virus

Juergen Kreileder writes "Symantec says they've received W32.Donut, the first .NET virus: 'This virus targets EXE files that were created for the Microsoft .NET framework. W32.Donut is a concept virus. It does not have any significant chance to become wide spread. However it shows that virus writers are paying close attention to the new .NET architecture and attempting to learn how to exploit it before the Framework will be available on most systems.'"

Comments

Even before you have a proof-of-concept app?

[2Bits]

And you already had a proof-of-concept virus before you have a proof-of-concept application? Now, you have to wonder if this .NET framework was developed for applications or for virus. Or there's no distinction between the two, as far as .NET is concerned?

Re:The virus.

[gergi]

um... have you ever looked at Microsoft track records about stuff like that? I would not trust the permissions surrounding .NET's applets (e.g. lock on file system access)... I can't wait for the first applet with a buffer overflow access violation that gives a hacker full access to a Windows server.

Re:A concept virus?

[Anonymous Coward]

Sheesh, how many times does this need to be slapped down??

"Virii" is not a word. You look like an ignorant fool trying to pose as "intelligent" by using this non-word.

Please, everyone, make it go away.

Re:The virus.

[PohlioVirus3]

> Well, this virus really does not do anything interesting.

They are *never* interesting. When I get the flu and feel miserable for a week, I don't think that's very "intersting". Virus writers are terrorists. They may not kill people, but peoples' lives have been seriously damaged by them. I think of the simple newspaper reporter who gets a virus just before an important deadline. The newspaper publishes a day later than the rival paper, and the reporter gets fired. Extreme example, but stuff like that happens.

AP

PARENT IS A TROLL??

[SuperDuG]

Okay well I guess this is just my public posting as to wondering how the parent is a troll at all. I posted it with the opinion behind how Virii creators bring business to Virii scanning companies and how it's all a sham where the end user is hurt 2 fold. By having to clean up the mess of a virus and then having to pay for the virii scanning software.

Looks like someone should really read the moderator guidelines.

Seems silly to let MS know before they RELEASE!!!

[malfunct]

I mean if you really want to defame MS you wait until they are already released before you explain all the exploits. Now MS just gets to go fix the bug and say "We released a secure product".

MS may not be the best at security, but recent publicity has put them on the defensive and they are actually fixing security holes. I bet this exploit won't work on the release version of the .NET Framework.