The First 64-bit Virus
Filed in: Security — June 1st, 2004
64-bit CPU, 64-bit MS Windows, 64-bit Linux, and now we have the first 64-bit virus!
W64.Rugrat.3344 is a direct-action infector–it exits memory after execution–of IA64 Windows Portable Executable (PE) files. These PE files include most 64-bit Windows programs other than .dlls.
The virus infects files that are in the same folder as the virus and in all subfolders. It is the first known virus for 64-bit Windows, and it uses the Thread Local Storage structures to execute the viral code. This is an unusual method of executing code.
It does not infect 32-bit Portable Executable files, and it will not run on 32-bit Windows platforms. The virus is written in IA64 assembly code.
Note: A true 64-bit computer is not required for this virus, as it can be run on a 32-bit computer that is using 64-bit simulation software.
Thought:
Though it is just a simple proof-of-concept virus but it is successful. Meaning, more 64-bit viruses are coming to your 64-bit PC…
