What file types can contain or be viruses?

youngbuck · 06-30-04, 01:45 AM

Obviously an executable file can be a virus... but what other types of files can be viruses or contain viruses? I mean, obviously a plain ol' text files with the .txt extension isn't going to have a virus. I mainly want to know so I know how to configure my virus scanner properly. No need having it scan thousands of files that can't be viruses.

Thanx in advance,
-YB

coin · 06-30-04, 01:50 AM

I hate to burst your bubble but viruses can be hidden in a *.txt file. I don't think there are any file types that are immune to infection of some sort. Any virus code in a *.txt file is inert in that file as long as the .txt isn't changed to another file type.

hafa · 06-30-04, 02:22 AM

Quote:

Originally Posted by coin

I don't think there are any file types that are immune to infection of some sort.

Are you certain? As far as I've been able to see, there's not yet a way to insert a virus into a jpg or gif file.

coin · 06-30-04, 02:45 AM

found a site with better info, I was wrong and there are certain file types that can be assumed to be safe.

http://hoaxinfo.com/vprotect.htm

Zatrix · 06-30-04, 08:59 AM

.com
.pif
.scr

theres one or 2 i missed

screensaver ones are the worst becase you can trick people so easily.
its either .scr or .src i fogot which one.

SavageBasher · 06-30-04, 10:23 AM

Anything can be a virus. Take an exe and rename it to a jpg. Now it looks like a jpg, but its still a virus.

David · 06-30-04, 10:29 AM

I agree. When running a virus scan its best to just scan all files. I have been sent .doc files that have been virus infected before. Just run a full system scan and go get a cup of coffee and read a book for a while

Quote:

Originally Posted by SavageBasher

Anything can be a virus. Take an exe and rename it to a jpg. Now it looks like a jpg, but its still a virus.

Zatrix · 06-30-04, 01:15 PM

if you rename a virus .jpg granted it will still BE virus BUT it wont execute. thus not infecting anyone

I.M.O.G. · 06-30-04, 01:29 PM

Any file can be a virus... And keep in mind that you don't have to directly execute the file (AKA you don't have to be a complete idiot to run the virus). Example:

I just got a case today where a user had 13 virus infections in files that are associated with autoCAD drawings... When the user opens the drawings, the virus has replaced associated files and is automatically executed by the program opening the drawing.

twump · 06-30-04, 02:30 PM

jpegs can be a virus. we just had a problem on another forum i'm part of where someone hotlinked their avatar from some website and the jpeg contained a virus and infected numerous members when they loaded a thread the guy with the avatar posted on. this was not a renamed exe it had the picture show up.

if you want to configure your AV properly have it scan everything and don't look for things to exclude

Christoph · 06-30-04, 02:35 PM

Since most image formats have comment fields, even valid images can contain a virus, although it would be difficult to execute them by accident. This page demonstrages that code can be hidden in jpgs and pngs and has some links to related sites.
I'm not saying that you should never look at jpgs for fear of getting a virus, but you shouldn't leave anything out when scanning for viruses either.

edit: For clarity, I realize that the site I linked to has compressed code embedded in images, and that you have to compile the code before it will do anything. You could use a similar technique to stick an executable in an image.

hafa · 06-30-04, 03:04 PM

Quote:

Originally Posted by twump

jpegs can be a virus. we just had a problem on another forum i'm part of where someone hotlinked their avatar from some website and the jpeg contained a virus and infected numerous members when they loaded a thread the guy with the avatar posted on. this was not a renamed exe it had the picture show up.

Twump, do you have any more information about this, i.e., the name of the virus, a URL with the thread in question, etc... I'd really like to have some concrete information from one of the "majors" like symantec to put before our IT department on this issue.

Zatrix · 06-30-04, 03:14 PM

just do ctrl+alt+delete to see if any processes have been added or deleted
go to start-run-msconfig-startup and see if anything that you dont know of has been added
go to netstat -n in dos to see if any wierd connections have been added

AND THE SURE FIRE WAY TO KNOW. if your firewall is on and loads next time you start up and nothing asks to connect then your safe.

drenader · 06-30-04, 03:50 PM

Scary, you must look in the unlikely places. Virus's are everywhere, just need to use some common sence and a good scanner.

I.M.O.G. · 06-30-04, 03:54 PM

Quote:

Originally Posted by Zatrix

just do ctrl+alt+delete to see if any processes have been added or deleted
go to start-run-msconfig-startup and see if anything that you dont know of has been added
go to netstat -n in dos to see if any wierd connections have been added

AND THE SURE FIRE WAY TO KNOW. if your firewall is on and loads next time you start up and nothing asks to connect then your safe.

Um, there are a lot of virii that will not be found by following those steps... I actually haven't come across any that can be found that way.

Zatrix · 06-30-04, 04:11 PM

well as long as you download from trusted places you will be FINE

also as long as your firewall works its 99% impossible for a trojan to get you.

SavageBasher · 06-30-04, 04:16 PM

Quote:

Originally Posted by IMOG

virii

vi·rus
n. pl. vi·rus·es

http://dictionary.reference.com/search?q=virus

No such word as virii or viri.

SavageBasher · 06-30-04, 04:18 PM

Quote:

Originally Posted by Zatrix

well as long as you download from trusted places you will be FINE

also as long as your firewall works its 99% impossible for a trojan to get you.

You will be FINE as long as the "trusted place" doesn't get hacked.

The only firewall I use anymore is my Linksys router, I used to run Zonealarm also, but I had it for over a month and it caught nothing.

gustav · 06-30-04, 04:22 PM

Someone told me its impossible to put a virus in an MP3, so as far as I know thats true. I'm not entirely sure if this is true, so enlighten me if I'm wrong and please back it up if you do.

drenader · 06-30-04, 04:31 PM

That would be a good one, an mp3 with a virus. Could bring anti piricy memebers to a new level. EXTREME ANTI PIRICY MEMBERS beware, lol crazy idiots.

06-30-04, 01:45 AM	Thread Starter #1
youngbuck Member Join Date: Aug 2002 Location: CO, USA	What file types can contain or be viruses? Obviously an executable file can be a virus... but what other types of files can be viruses or contain viruses? I mean, obviously a plain ol' text files with the .txt extension isn't going to have a virus. I mainly want to know so I know how to configure my virus scanner properly. No need having it scan thousands of files that can't be viruses. Thanx in advance, -YB
	QUOTE Thanks

06-30-04, 01:50 AM	#2
coin Member Join Date: Jan 2003 Location: Denmark	I hate to burst your bubble but viruses can be hidden in a .txt file. I don't think there are any file types that are immune to infection of some sort. Any virus code in a .txt file is inert in that file as long as the .txt isn't changed to another file type.
	QUOTE Thanks

06-30-04, 02:45 AM	#4
coin Member Join Date: Jan 2003 Location: Denmark	found a site with better info, I was wrong and there are certain file types that can be assumed to be safe. http://hoaxinfo.com/vprotect.htm
	QUOTE Thanks

06-30-04, 08:59 AM	#5
Zatrix Member Join Date: Jun 2004 Location: moving to ohio once 2012 gets closer	.com .pif .scr theres one or 2 i missed screensaver ones are the worst becase you can trick people so easily. its either .scr or .src i fogot which one.
	QUOTE Thanks

06-30-04, 10:23 AM	#6
SavageBasher Member Join Date: Nov 2003 Location: Northeast PA	Anything can be a virus. Take an exe and rename it to a jpg. Now it looks like a jpg, but its still a virus.
	QUOTE Thanks

What file types can contain or be viruses?

Internet Services

Website Development

Tech Hardware

06-30-04, 01:15 PM	#8
Zatrix Member Join Date: Jun 2004 Location: moving to ohio once 2012 gets closer	if you rename a virus .jpg granted it will still BE virus BUT it wont execute. thus not infecting anyone
	QUOTE Thanks

06-30-04, 01:29 PM	#9
I.M.O.G. Glorious Leader Join Date: Nov 2002 Location: Rootstown, OH	Any file can be a virus... And keep in mind that you don't have to directly execute the file (AKA you don't have to be a complete idiot to run the virus). Example: I just got a case today where a user had 13 virus infections in files that are associated with autoCAD drawings... When the user opens the drawings, the virus has replaced associated files and is automatically executed by the program opening the drawing. __________________ The OC Forums Way We are a team. We are a community. We are a fellowship made strong by mutual respect and shared dedication to the task of enriching all who come here. The OC Forums Thank You Thread Put your computer to work for our OC Forum Teams! Try out our POST TEMPLATES, they save you time answering common questions! I spend half my money on CPUs, GPUs, and Liquid Nitrogen. The other half I waste.
	QUOTE Thanks

06-30-04, 02:30 PM	#10
twump Member Join Date: Jan 2002 Location: CA	jpegs can be a virus. we just had a problem on another forum i'm part of where someone hotlinked their avatar from some website and the jpeg contained a virus and infected numerous members when they loaded a thread the guy with the avatar posted on. this was not a renamed exe it had the picture show up. if you want to configure your AV properly have it scan everything and don't look for things to exclude
	QUOTE Thanks

06-30-04, 02:35 PM	#11
Christoph JAPH Senior Join Date: Oct 2001 Location: Redmond, WA	Since most image formats have comment fields, even valid images can contain a virus, although it would be difficult to execute them by accident. This page demonstrages that code can be hidden in jpgs and pngs and has some links to related sites. I'm not saying that you should never look at jpgs for fear of getting a virus, but you shouldn't leave anything out when scanning for viruses either. edit: For clarity, I realize that the site I linked to has compressed code embedded in images, and that you have to compile the code before it will do anything. You could use a similar technique to stick an executable in an image. __________________ FoldSig \| Heatware \| Alt OS FAQWiki \| JAPH \| ADO "Coming onto the forums after you've had a concussion is prolly not a good idea, but I'm doin' it anyways!" -dark_15 Last edited by Christoph; 06-30-04 at 03:09 PM.
	QUOTE Thanks

06-30-04, 03:14 PM	#13
Zatrix Member Join Date: Jun 2004 Location: moving to ohio once 2012 gets closer	just do ctrl+alt+delete to see if any processes have been added or deleted go to start-run-msconfig-startup and see if anything that you dont know of has been added go to netstat -n in dos to see if any wierd connections have been added AND THE SURE FIRE WAY TO KNOW. if your firewall is on and loads next time you start up and nothing asks to connect then your safe.
	QUOTE Thanks

06-30-04, 03:50 PM	#14
drenader Member Join Date: Nov 2003 Location: Austin	Scary, you must look in the unlikely places. Virus's are everywhere, just need to use some common sence and a good scanner. __________________ "Death gotta be easy, 'cause life is hard It'll leave you physically, mentally, and emotionally scarred" -50 Cent
	QUOTE Thanks

06-30-04, 04:11 PM	#16
Zatrix Member Join Date: Jun 2004 Location: moving to ohio once 2012 gets closer	well as long as you download from trusted places you will be FINE also as long as your firewall works its 99% impossible for a trojan to get you.
	QUOTE Thanks

06-30-04, 04:22 PM	#19
gustav Member Join Date: Sep 2003 Location: Folding in Illinois	Someone told me its impossible to put a virus in an MP3, so as far as I know thats true. I'm not entirely sure if this is true, so enlighten me if I'm wrong and please back it up if you do.
	QUOTE Thanks

06-30-04, 04:31 PM	#20
drenader Member Join Date: Nov 2003 Location: Austin	That would be a good one, an mp3 with a virus. Could bring anti piricy memebers to a new level. EXTREME ANTI PIRICY MEMBERS beware, lol crazy idiots. __________________ "Death gotta be easy, 'cause life is hard It'll leave you physically, mentally, and emotionally scarred" -50 Cent
	QUOTE Thanks

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search