Juan Carlos Montes wrote: > Shachar Shemesh escribió: > >> I think you should be aware that Wine is no replacement for a security >> tool. If you run a malware using Wine, it is possible for this malware >> to interact directly with your Linux machine, bypassing your protection. >> >> Shachar >> > > I know it, but we can control all actions that the malware make. If the > malware > bypass the protection and infect the machine... no problem, format, image and > new malware to check, :) > But what good is a malware study tool if the malware can trivially detect it's there? What if it doesn't infect the machine, but just run differently?
There are Windows tools that do similar things to what you need (check out the sys-internals web site), where the environment is much more close to the real thing. Actually, Dan's question is the more interesting here - did the malwares work under wine? Shachar
