First family of Windows Vista viruses unleashed

Published: 5 August 2005 y., Friday

An Austrian hacker earned the dubious distinction of writing what are thought to be the first known viruses for Microsoft's  Windows Vista operating system. Written in July, the viruses take advantage of a new command shell, code-named Monad, that is included in the Windows Vista beta code.

The viruses were published last month in a virus-writing tutorial written for an underground hacker group calling itself the Ready Ranger Liberation Front, and take advantage of security vulnerabilities in the new command shell. Unlike the traditional Windows graphical user interface, which relies heavily on the mouse for navigation, command shells allow users to use powerful text-based commands, much like Windows' predecessor, DOS.

The viruses were written by a hacker calling himself "Second Part To Hell," and published on July 21, just days after Monad was publicly released by Microsoft, according to Mikko Hyppönen, chief research officer with Helsinki's F-Secure Corp. Second Part To Hell is the pseudonym of an Austrian-based hacker who also goes by the name Mario, Hyppönen said.

Because of its sophistication, the new command shell offers new opportunities for hackers, Second Part To Hell wrote in the tutorial, a copy of which was obtained by the IDG News Service. "Monad will be like Linux's BASH (Bourne Again Shell) -- that means a great number of commands and functions," he wrote. "We will be able to make as huge and complex scripts as we do in Linux."

F-Secure has named the virus family Danom (Monad in reverse). After examining the code, Hyppönen said that the Danom family is disruptive, but not capable of causing significant damage to Windows users. "These are proof of concept viruses," he said, "Where virus writers want to break new ground and write the first viruses for a new platform."

Šaltinis: infoworld.com
Copying, publishing, announcing any information from the News.lt portal without written permission of News.lt editorial office is prohibited.

Facebook Comments

New comment


Captcha

Associated articles

China terminates 700 sites in porn crackdown

China's crackdown on pornograhy is gathering pace following reports that 700 Web sites have been shut down and 220 people arrested as authorities try to censor XXX sites more »

Clock speeds up

AMD to release Sempron early more »

Jabber Chats Up Gateway to IBM

Instant messaging software firm Jabber has outlined plans for an XMPP-to-SIP Gateway that opens the door for interoperability with IBM's Lotus IM product more »

Sloppy banks open the door to phishermen

A new vulnerability makes it easier for fraudsters to pass off content from bogus websites as the real thing more »

search.lt news

search.lt presents newest links more »

Microsoft's Ballmer hits out at "cloned" open source

Microsoft CEO Steve Ballmer has criticised the lack of innovation in open source software more »

Indian offshoring no threat yet to Europe's R&D

European 'variations' will prevent Indian players enjoying same success as in US more »

Internet Speaks and Shows

Speaking about an on-line broadcast we mean not only television, we speak about Internet too. In comparison to television the Internet allows us not only to see and hear on-line program broadcast, it allows to realize all our ideas and thoughts in practice. With only one button press we can enjoy a real time view of the wild Africans’ dances or the choppy Baltic Sea via Internet.

more »

Hungarian virus writer avoids jail

A Hungarian virus writer escaped prison yesterday after he was convicted of writing a virus that infected tens of thousands of Windows PCs more »

Ericsson delivers EDGE infrastructure in Estonia

Swedish telecomms solutions provider Ericsson said on Monday (28 June) that the Estonian mobile operator EMT had launched its commercial EDGE service by using infrastructure supplied by Ericsson more »