How good is WINE at running Windows software on Linux? Good enough to get infected

WINE. It's not an emulator, but it is a pretty decent way to run many Windows programs under Linux.
What's that you say? Why yes, malware and scareware do count as programs. So, do they run under WINE, too?
The answer is a resounding yes!
Linux user Filip Sufitchi was killing time on Facebook when he stumbled across a malicious link on someone's wall. The link used a series of redirects to dump users at a site that pushes rogue antivirus software. Ignoring Firefox's repeated warnings (in the name of science, of course), Filip clicked onward until he wound up on the nefarious site.
Filip was rewarded with an incredibly annoying bogus app that didn't care what platform it was installed on. Win Police Pro set up shop and began "scanning" his WINE C: drive for "viruses," and WINE neatly transformed the Windows system tray alerts to Gnome notifications. The infection was also able to attach itself to the WINE registry.
While it's not the most positive endorsement of WINE around, it's still pretty impressive that an app like this was able to function without missing a beat (apart from a single error message).
What's that you say? Why yes, malware and scareware do count as programs. So, do they run under WINE, too?
The answer is a resounding yes!
Linux user Filip Sufitchi was killing time on Facebook when he stumbled across a malicious link on someone's wall. The link used a series of redirects to dump users at a site that pushes rogue antivirus software. Ignoring Firefox's repeated warnings (in the name of science, of course), Filip clicked onward until he wound up on the nefarious site.
Filip was rewarded with an incredibly annoying bogus app that didn't care what platform it was installed on. Win Police Pro set up shop and began "scanning" his WINE C: drive for "viruses," and WINE neatly transformed the Windows system tray alerts to Gnome notifications. The infection was also able to attach itself to the WINE registry.
While it's not the most positive endorsement of WINE around, it's still pretty impressive that an app like this was able to function without missing a beat (apart from a single error message).












Comments
10
Subscribe to commentsDrew GreenOct 27th 2009 9:55AM
I don't quite follow. Was he browsing with Firefox under WINE or just the regular FF installed on the Linux system? I thought that in order for software to utilize a WINE "bottle" that it needs to be launched manually utilizing that bottle or referenced by software in that bottle.
GuidoOct 27th 2009 10:54AM
technically, Firefox could download the .exe and Wine would open it.
haydenstreaterOct 27th 2009 8:08PM
thats what happens when you turn your back on the things you can trust. Pc's and all they're components are the work of the devil, its like drugs getting young people into the clubbing scene.
SeanOct 27th 2009 11:12AM
This is quite a milestone for Wine. You know you've captured the essence of Windows when you start getting viruses for it.
nfn6789Oct 27th 2009 12:21PM
was it difficult to delete or did you remove it with no problem?
KaushikOct 27th 2009 12:35PM
Wine does run viruses. Another user tried it on Ubuntu
http://ubuntuforums.org/showthread.php?t=72598
Tech-MikeOct 27th 2009 1:55PM
Because the virus was designed to infect the windows platform only his/your wine directory would be effected and to fix the problem you would simply uninstall wine and or remove your .wine directory. Removing wine is not the only solution - you could also try removing the virus as you would in windows.
For safer use, dont associate wine with executables ( .exe's)....dont associate it with anything for that matter. Even without the associations you can still run your apps manually and use shortcut / launchers.
whiskeyOct 30th 2009 1:06AM
It would be rather easy to disinfect WINE. All one needs to do is:
1. Keep a backup of the .wine folder with all apps installed (and all you have to do is copy it everytime you install an important app).
2. Delete the infected .wine folder
3. Either go to the menu entry to config wine (which will create a new fresh copy or .wine) or copy the .wine backup and rename it to .wine
Also... never run WINE as root.
whiskeyOct 30th 2009 1:07AM
Just delete .wine, go to it's configure screen, and remember to never run it as root.
joeyjuviyaniJan 12th 2010 7:07PM
Get the suggestions, features and advantages for the softwares of all operating systems at: http://forums.techarena.in/windows-software/