Security Watch: Is The First Vista Virus Here?
Name: Danom (F-Secure)
Affects: MSH (Microsoft Command Shell), code named "Monad", which is in beta now.
What it does: "Danom" is a series of script viruses targeting a new, as-yet unreleased Microsoft Command Shell (MSH) called "Monad" (notice that Danom is Monad spelled backwards), which, some thought, was going to appear in next year's Windows Vista operating system release.
Script viruses are viruses written in a scripting language. Many users are familiar with DOS/Windows batch language, which is a weak scripting language, but there are many other more powerful and popular ones; on UNIX and Linux there are the Korn Shell (ksh), the Bourne Shell (sh), the Bourne Again Shell (bash), and many others. On Windows there are versions of these same shells, although differences in the operating systems generally make scripts incompatible. Microsoft also provides a highly-programmable WSH (Windows Script Host).
A script virus is written in such a script language. Danom scripts read other Danom scripts and modifies them to include the Danom code.
At first, F-Secure touted these viruses as the First "Vista Virus" It was widely-reported, and later conceded by F-Secure, that the MSH is not scheduled to ship with Windows Vista or the server version of Windows "Longhorn."
|