Filed under: Linux, Open Source
How good is WINE at running Windows software on Linux? Good enough to get infected
by Lee Mathews Oct 27th 2009 at 9:00AM
WINE. It's not an emulator, but it is a pretty decent way to run many Windows programs under Linux.
What's that you say? Why yes, malware and scareware do count as programs. So, do they run under WINE, too?
The answer is a resounding yes!
Linux user Filip Sufitchi was killing time on Facebook when he stumbled across a malicious link on someone's wall. The link used a series of redirects to dump users at a site that pushes rogue antivirus software. Ignoring Firefox's repeated warnings (in the name of science, of course), Filip clicked onward until he wound up on the nefarious site.
Filip was rewarded with an incredibly annoying bogus app that didn't care what platform it was installed on. Win Police Pro set up shop and began "scanning" his WINE C: drive for "viruses," and WINE neatly transformed the Windows system tray alerts to Gnome notifications. The infection was also able to attach itself to the WINE registry.
While it's not the most positive endorsement of WINE around, it's still pretty impressive that an app like this was able to function without missing a beat (apart from a single error message).
What's that you say? Why yes, malware and scareware do count as programs. So, do they run under WINE, too?
The answer is a resounding yes!
Linux user Filip Sufitchi was killing time on Facebook when he stumbled across a malicious link on someone's wall. The link used a series of redirects to dump users at a site that pushes rogue antivirus software. Ignoring Firefox's repeated warnings (in the name of science, of course), Filip clicked onward until he wound up on the nefarious site.
Filip was rewarded with an incredibly annoying bogus app that didn't care what platform it was installed on. Win Police Pro set up shop and began "scanning" his WINE C: drive for "viruses," and WINE neatly transformed the Windows system tray alerts to Gnome notifications. The infection was also able to attach itself to the WINE registry.
While it's not the most positive endorsement of WINE around, it's still pretty impressive that an app like this was able to function without missing a beat (apart from a single error message).
So, just how good at time waster games are you? Think you've got the stuff? Well, The World's Hardest Game 2.0 doesn't think you do.
Yes, amazingly, it's possible to have a sequel to a game called "The World's Hardest Game". It doesn't seem logically possible, since if the first one was actually the world's hardest, how could another one come along and share the moniker? It made me doubt the name in the first place. That is, until I tried the game.
The mechanics of the game are very simple. You are a small red square, ...
Reader Comments (Page 1 of 1)
Drew Green said 9:55AM on 10-27-2009
I don't quite follow. Was he browsing with Firefox under WINE or just the regular FF installed on the Linux system? I thought that in order for software to utilize a WINE "bottle" that it needs to be launched manually utilizing that bottle or referenced by software in that bottle.
Reply
Guido said 10:54AM on 10-27-2009
technically, Firefox could download the .exe and Wine would open it.
haydenstreater said 8:08PM on 10-27-2009
thats what happens when you turn your back on the things you can trust. Pc's and all they're components are the work of the devil, its like drugs getting young people into the clubbing scene.
Sean said 11:12AM on 10-27-2009
This is quite a milestone for Wine. You know you've captured the essence of Windows when you start getting viruses for it.
Reply
nfn6789 said 12:21PM on 10-27-2009
was it difficult to delete or did you remove it with no problem?
Reply
Kaushik said 12:35PM on 10-27-2009
Wine does run viruses. Another user tried it on Ubuntu
http://ubuntuforums.org/showthread.php?t=72598
Reply
Tech-Mike said 1:55PM on 10-27-2009
Because the virus was designed to infect the windows platform only his/your wine directory would be effected and to fix the problem you would simply uninstall wine and or remove your .wine directory. Removing wine is not the only solution - you could also try removing the virus as you would in windows.
For safer use, dont associate wine with executables ( .exe's)....dont associate it with anything for that matter. Even without the associations you can still run your apps manually and use shortcut / launchers.
Reply
whiskey said 1:06AM on 10-30-2009
It would be rather easy to disinfect WINE. All one needs to do is:
1. Keep a backup of the .wine folder with all apps installed (and all you have to do is copy it everytime you install an important app).
2. Delete the infected .wine folder
3. Either go to the menu entry to config wine (which will create a new fresh copy or .wine) or copy the .wine backup and rename it to .wine
Also... never run WINE as root.
Reply
whiskey said 1:07AM on 10-30-2009
Just delete .wine, go to it's configure screen, and remember to never run it as root.
Reply