First (proof-of-concept) .NET virus

Juergen Kreileder writes "Symantec says they've received W32.Donut, the first .NET virus: 'This virus targets EXE files that were created for the Microsoft .NET framework. W32.Donut is a concept virus. It does not have any significant chance to become wide spread. However it shows that virus writers are paying close attention to the new .NET architecture and attempting to learn how to exploit it before the Framework will be available on most systems.'"

Comments

Even before you have a proof-of-concept app?

[2Bits]

And you already had a proof-of-concept virus before you have a proof-of-concept application? Now, you have to wonder if this .NET framework was developed for applications or for virus. Or there's no distinction between the two, as far as .NET is concerned?

Re:The virus.

[gergi]

um... have you ever looked at Microsoft track records about stuff like that? I would not trust the permissions surrounding .NET's applets (e.g. lock on file system access)... I can't wait for the first applet with a buffer overflow access violation that gives a hacker full access to a Windows server.