Live data from Hacker News

WCry 2.0 functions perfectly under Wine

twitter.com

21–30 of 54 posts

Re: WCry 2.0 functions perfectly under Wine

#24

Earlier quoted context omitted.

Most interesting. However, you have to butcher your system a bit in order to make that happen... That doesn't say there aren't setups like that, but they are really one out of million.

How is that so? I believe Wine processes have r/w access to the user's home directory.

And most of your valuable stuff will be in your user dir if you're on a personal computer.

Re: WCry 2.0 functions perfectly under Wine

#26
post #15

Earlier quoted context omitted.

There may also be links to your home directory as "Desktop", "My Documents", etc. See winecfg for these. And note that your registry files may refer to Z: (mostly for fonts, it seems), or even directly to files outside your Wine directory.

If the software is Wine-aware, it doesn't matter. The \\unix\ filesystem namespace allows programs running under Wine to access the host filesystem whether it's mapped as a drive or not. And, of course, since Wine Is Not an Emulator, it could also use POSIX APIs or Linux kernel syscalls directly if it wanted to.

Have there been reports of Wine-aware malware already? (If not, the next generation probably will, though.)

Re: WCry 2.0 functions perfectly under Wine

#28
Wine has long been sufficiently compatible with Windows to run malware. I added a bit about this to the Wine FAQ in 2009 I think ;-) IIRC the ZeroWine malware analyser would run malware in Wine in Debian in a QEMU virtual machine.

The question here is not whether it runs, but whether it can infect.

Post reply on HN