Yesterday all *.exe files on my machine were infected by Win32.Neshta virus after I ran one program via wine. I cured the machine with
rm -rf ~/.wine, but it's no good anyway.
So, I decided to set owner root:root and mode 644 on all *.exe, *.com... files. But the owner of the directories is still me. So, I (and, therefore, viruses) can freely rename/remove *.exe files. It's bad.
How can I protect *.exe files from being modified/ renamed/ removed by viruses?
Now I have two ideas:
make a hardlink for all *.exe to a separate root directory