Well, according to the experiences posted by the people in the link I just pointed out, it can do a lot more than just "install some extra files". The poster called "Mustard" reported that he was running etherape, and it started making connections to a lot of different places.
The SomeFool first-generation worm (Netsky.D according to some folks) actually installs its winlogon.exe file under Wine, and, as an added bonus, seems to get stuck in an endless loop, thus really having a negative performance impact on my Linux machine! I'll give this one 4/5 penguins for not only running and sort of doing what it was supposed to, but actually doing mildly bad things to Linux -- at least until I hit Control-C in the terminal from which I was running Wine to stop it dead.
Wow, well I will have to say I just had a similar incident! I have a usb stick I use to take my work to different places. I took it to a printer here in Peru (all the windows computers here have viruses!) and it was infected. I didn't think nothing of it, I removed the infected files, except one that I didn't believe, because it was my program, and one I run in wine. I ran it and it acted really funny. The I cancelled it. The I ran the virus scan again, and there were more viruses (worms to be exact) on my usb stick. I ran the virus scan (clamscan) on my other partition and it too was full of viruses. I found out that
YES VIRUSES WORK ON LINUX WITH WINE!
I have yet to find where it messed up my Ubuntu system.... full scan going on at the moment... but it put viruses many places on my system, and that is not good because I often take my usb stick to my wife's computer (XP) and plug it in. I will post the scan results when it gets done, if it is worth posting.
I'm not Re-installing
I'm not Restoring
I'm Removing viruses
Does anyone have any good suggestions on how to do that? Thanks
and a little later...
Ok, here is what happened. I ran the program maybe for about 5-10 Seconds and then killed it. However it put programs in memory, and they continued running for maybe about 10 min untill I killed everything. Here is what happened. I have a 8 Gig partition that is full of all my work. While the thing was running it managed to really expand itself. In every folder that I have in an 8Gb partition I have a very lot of partitions, it made and exe file after the folder name. Ex:
Folder name - htmlwork
inside that folder is an htmlwork.exe file that is a virus.
I have literally 100's of viruses on that partition, in a matter of 10 min, and it is still scanning after 3 hours of scanning. Does anyone have a simple way of removing these? I can go and manually do it, but it will take me a considerable amount of time. The folder names very extensivelly, many of them contain spaces ect. HELP!
A good peice of advice VIRUS SCAN EVERY .EXE, .BAT, .COM OR OTHER MISC WINDOWS FILE YOU DOWNLOAD BEFORE YOU RUN IT IN WINE!!!
and the end result of Shane's case...
Well, two scans still finishing up, but I don't expect them to turn anything up, they haven't so far. I had a grand total of 1305 viruses on my computer. All in my /home/user partition and my /mnt/data partition that stores all my work. That is all! Probably will have to re-install a few of my wine programs but nothing more than time lost. If it had been windows that would not have been the case!
That's a lot
of viruses, and according to Shane, many of them ran in memory, therefore slowing the system down. Granted, it didn't do nearly as much damage as virii do in Windows, but that's not the point. The point is, viruses CAN run under Wine, and they CAN do some damage to your system.
But, anyway, I went ahead and installed Wine in Ubuntu 9.10. I will use it despite the risks, but I'll definitely be careful about what I run in it. I think the suggestion of virus scanning every Windows file before running it in Wine is a good one, and I'll be sure to do it.