• Welcome to Overclockers Forums! Join us to reply in threads, receive reduced ads, and to customize your site experience!

What file types can contain or be viruses?

Overclockers is supported by our readers. When you click a link to make a purchase, we may earn a commission. Learn More.
hafa said:
Twump, do you have any more information about this, i.e., the name of the virus, a URL with the thread in question, etc... I'd really like to have some concrete information from one of the "majors" like symantec to put before our IT department on this issue.


here is a link to the thread where it was brought up. http://www.chevytalk.org/threads/sh...73793&page=1&view=collapsed&sb=5&o=93&fpart=1

here is a link to symantec's info on the virus from that thread. http://securityresponse.symantec.com/avcenter/venc/data/js.scob.trojan.html
 
I'm sure you could set your anti-virus up to regularly scan the biggest threats (Exe, bat, com, zip, etc) and only the non-major threats (txt, jpeg, gif, bmp, pdf, etc.) once a week or month, whenever.
 
I set mine (Norton) to run a Full System Scan every morning at 7 AM when I0 know I won't be using the computer. I set PerfectDisk 6.0 to run an hour later to defrag my three hard drives. Works great and keeps my system clean/speedy.
 
Thanks for the linkage, twump.

The interesting thing about the JS.Scob.Trojan is that it is neither encoded in the .jpg, nor is it within the .jpg comments. It simply appends itself to ANY document in the http stream, be it .html, .jpg, .gif or whatever. so strictly speaking, the worm itself is completely independent of any file type.

Since the webserver hosting the user's image was infected, every time someone accessed a post from said user, the virus was appended to the http stream.
 
Thats like what I was referencing hafa... The file type itself can be clean, but through accessing the clean file type, you can contract a virii that is piggy-backing or has otherwise somehow associated with a legitimate file.

"Viruses" = teh l4M3R
"Virii" = teh 1337

It's just more fun talking about them sneaky little virii than it is talking about boring old viruses, bleh. :D
 
there seem to be some misconceptions in this thread... even IF you have a firewall, you can still have a trojan - it just won't be able to relay out to the internet.

this is why you see people running both a hardware AND a software firewall on their system, the software one protects against *outgoing*, aka: trojan activity.

as mentioned by nearly everyone, set whatever AV program you use to scan ALL files, and inside compressed ones if there is an option for it.
 
well if you have a trojan BUT its not able to send your info to the other person then it doesn't matter. trojans are non destructive. only there controller does the stuff. viruses can do it without a controller.
 
Trojans themselves are not destructive, but the person who sent you it might. A trojan is a backdoor, so the virus write or hacker can control you computer, delete files, put on more viruses, or even set it up to do nasty crap.
 
SavageBasher said:
Trojans themselves are not destructive, but the person who sent you it might. A trojan is a backdoor, so the virus write or hacker can control you computer, delete files, put on more viruses, or even set it up to do nasty crap.

yes, but he's saying if the trojan cant access the internet, it wont harm anything. and while technically he may be right, who the heck wants a trojan sitting on their system, even if its "not doing anything" ?
 
Just because it can't get out, doesn't mean its not doing anything... It can still suck up resources and cause abnormal operation. Many trojans do not just flawlessly assimilate with your system and create an open backdoor for attackers, they often mess other things up in the process.

Overall, I think some people in this thread are underestimating or being a bit naive about virii, trojans, and/or malware. You shouldn't underestimate the importance of thorough updates and proper detection and prevention schemes. The internet is not naturally safe - it developed for a use far different than what it has become, and as a result, the individual user is left with much of the security responsibility.
 
quick side point the plural of compputer virus is viruses but for a medical virus it is virii. The word viruses cam from America having forgotten their languages Latin roots :p . To be honest thay are both interchangeable now
 
Thank you coin, I found your side point interesting. :)

So it seems not only is virii more fun to say, but its foundations are much more grammatically proper considering our heathenizing of the English language. :D
 
now at no point did I use the word heathenizing, I would probably use the phrase localising (well at least within earshot of Americans) :p Besides virii does sound better, somewhat more Dr.Evilish......'one million frickin' virii' just not the same with viruses
 
Anything could contain a virus. With some file types the virus could be launched automatically (i.e., EXE, COM, SCR, DOC). Those file types can ether be a virus or contain one and launch it automatically. EXE's and COM's have the ability to be a virus or be infected with one. SCR's and DOC's have the ability to be infected with a virus. With the use of a Macro a DOC can contain a virus or malicious scripts and launch it when the document is opened.

Other files can also hold viral code. They just don't have the ability to execute it on there own but other executables could call for that code.

BAT files really can't be viruses themselves. Sure, you can make a BAT file that wipes your HDD or something like that but that's not a virus. That's a malicious script.

[/beingontopic] ;-)
 
Last edited:
coin said:
quick side point the plural of compputer (sic) virus is viruses but for a medical virus it is virii. The word viruses cam from America having forgotten their languages Latin roots :p . To be honest thay (sic) are both interchangeable now

OK, I'll take part in this thread highjack...

Sorry, coin, but I must beg to differ with your assertation:

http://www.worldhistory.com/wiki/p/plural-of-virus.htm
http://dictionary.reference.com/help/faq/language/v/virus.html
http://www.perseus.tufts.edu/cgi-bin/morphindex?lookup=virus&lang=la&formentry=1

If you wish to purview an in-depth technical analysis and etymological history:

http://omega.cohums.ohio-state.edu/mailing_lists/CLA-L/2002/05/0316.php

http://www.ku.edu/carrie/archives/mediev-l/melcher/2002/05/msg00126.html
 
There's probably more ways to get a virus without opening a file than there is by opening one. I mean there are so many vunerabilities in software that hackers can put a virus or trojan on you computer and execute it. Look at the blaster worm. It probably used an EXE file to get it started, but it could just appear on unpatched computers without user opening any file.

Another example:
http://forums.spywareinfo.com/index.php?showtopic=2500
 
Back