Virus writers take an early crack at .Net

NEWS Virus writers have apparently made the early developer list for Microsoft's .Net initiative. On Wednesday, antivirus companies received a copy of the first virus capable of infecting files based on Microsoft's .Net Intermediate Language, or MSIL. Known as W32.Donut, the virus does little but infect other .Net files, but it shows that the programmers who create such code are looking ahead, said Motoaki Yamamura, a virus researcher with security software company Symantec. "The only interesting part is that it infects a new class of files," he said. "Traditionally, virus writers look for what is coming out next and look at being the first at spreading viruses and worms on those new platforms." W32.Donut is a true virus, infecting files on the computer and spreading only when those files are moved to a new computer by email or copying and then opened. One of every 10 times a file infected with Donut starts up, the virus will display the message "This cell has been infected by dotNET virus!" and the author's name. Though the virus spreads to .Net files, only a small fraction of it is written in MSIL, according to both Symantec and the author's description of the virus. It's uncertain whether such a virus could spread among files when Microsoft's .Net framework is up and running, as the company has several security checks in place. Microsoft representatives could not immediately be reached for comment. Microsoft.Net is the company's largest push yet to turn its software into a network over which consumer, business and financial services can be easily delivered. With the .Net initiative, the Redmond, Washington software giant says it is attempting to build a more secure framework. For all security-related news, including updates on the latest viruses, hacking exploits and patches, check out ZDNet UK's Viruses and Hacking News Section. For everything Internet-related, from the latest legal and policy-related news, to domain name updates, see ZDNet UK's Internet News Section. Have your say instantly, and see what others have said. Click on the TalkBack button and go to the Security forum. Let the editors know what you think in the Mailroom. And read other letters.

Post your comment

In order to post a comment you need to be registered and logged in

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Membership FAQ

ZDNet UK Live

[programming] H.264 - a sting in the tail http://reddit.com/bfu4q [zdnet.co.uk]

6 minutes ago on Twitter by pbreddit

H.264 - a sting in the tail [programming] 13 points, submitted by zigzag [zdnet.co.uk] http://reddit.com/bfu4q

1 hour ago on Twitter by reddit

Malware infects second Vodafone HTC phone: [zdnet.co.uk] A second Android-based HTC Magic from Vodafone has been... http://dlvr.it/KhKx

3 hours ago on Twitter by cybfor

Chatter preview http://www.zdnet.co.uk/news/application-development/2010/03/17/salesforce-opens-up-chatter-developer-preview-40088348/

4 hours ago on Twitter by miyabi81

US gov t considers undercover social networking: [zdnet.co.uk] The Obama administration has considered sending... http://dlvr.it/Kh3L

4 hours ago on Twitter by cybfor

Please give me chance in the vodafone essar Ltd as back office executive

6 hours ago by sudipta_vodafone on Vodafone culls 375 'mainly back-office' jobs

I want to get a back office job in vodafone direct payroll

6 hours ago by sudipta_vodafone on Vodafone culls 375 'mainly back-office' jobs

I also find it harder to use. It used to scale properly in Firefox. Text would size up and down without dragging all the right edge debris with it....

9 hours ago by Xwindowsjunkie on ZDNet UK: faster, smarter, still IT all the way

that comment bot is a nutter, it just referred me to the moderator on my own blog. shocked look. please help thank you Dava I'm afriad to...

13 hours ago by dava4444 on Welcome to the new ZDNet UK community!

Hi Rupert! Don't think I could fill the above shoes... but if your ever looking for a consumer rights Tech blogger..tip me the wink lol peace Dava

14 hours ago by dava4444 on Fancy working for ZDNet UK?

Hi Rupert My photo is gone from my profile and I just got told i was a spammer by the comment bot. the navigation is gone for my profile. :O on...

14 hours ago by dava4444 on Welcome to the new ZDNet UK community!

With windows it is always more bloat, and a lot of that seems to be duplicated in various places. I've noticed that you will have freed space on...

20 hours ago by ator1940 on Can you believe it - 2765 kB will be freed?

Buzz My Stat : New search for http://www.zdnet.co.uk Take a look: http://www.buzzmystat.com/site/zdnet.co.uk

1 day ago on Twitter by BuzzMyStat

Hi Jamie, I'm sorry your comment got caught in the spam filter. We use an industry standard blacklist for this. I suspect that the comment may...

1 day ago by Karen Friar on Spam? Filter Changed?

Pop - Neither have I. Ever, under any circumstances. I'm much more accustomed to Windows slowly, but inexorably, consuming more and more disk...

1 day ago by J.A. Watson on Can you believe it - 2765 kB will be freed?

Apple are currently pushing to get tv content on the iPad by April 3rd. This could possibly be seen as a spoiler for that announcement I suppose....

2 days ago by John Molloy

Hey - presume you mean something that builds on Apple's existing TV device? Apple have already had a couple of runs at building Apple TV and it's...

2 days ago by Andrew Donoghue on Google's TV timing may reveal more to come

Google, Sony, Intel may build TV project www.zdnet.co.uk/news/emerging-tech/2010/03/18/google-sony-intel-may-build-tv-project-40088359/

2 days ago on Twitter by BVE2011

70,0000 to 90,0000 computers? A very small number considering some of these botnets are in the millions, and there are so many of them operating,...

2 days ago by ator1940 on Microsoft says it decimated Waledac botnet

I agree Roger, and why can't they write secure code? What will happen when they find stolen code in windows? They have a track record of...

2 days ago by ator1940 on Microsoft lashing out at Linux, open source

Featured white papers

Achieving PCI Compliance for:Privileged Password Management & Remote Vendor Access

e-DMZ Security

For multi-store outlets, including retail, banking, grocery, gas, hospitality, convenience stores and others, reducing (or avoiding) the cost of in-store system support and maintenance while maintaining compliance with PCI and other requirements has become a strategic challenge.

Download now

Web 2.0 Security Threats: How to Protect Your Enterprise Network

Qualys

Speaker: Dr. Chenxi Wang, Principal Analyst, Security and Risk Management, Forrester Research, Inc. As Enterprises are increasingly connected to the Internet and as hard organizational boundaries are fast disappearing, security professionals are facing fresh challenges in Enterprise computing.

Download now