Notices

Overclockers Forums > Software > Internet, Networking, and Security
Internet, Networking, and Security Networking and Viruses/Malware trouble. Get the answers here.
Forum Jump

What file types can contain or be viruses?

Post Reply New Thread Subscribe Search this Thread
 
 
Thread Tools
Old 06-30-04, 01:45 AM Thread Starter   #1
youngbuck
Member



Join Date: Aug 2002
Location: CO, USA

 
What file types can contain or be viruses?


Obviously an executable file can be a virus... but what other types of files can be viruses or contain viruses? I mean, obviously a plain ol' text files with the .txt extension isn't going to have a virus. I mainly want to know so I know how to configure my virus scanner properly. No need having it scan thousands of files that can't be viruses.

Thanx in advance,
-YB
youngbuck is offline   QUOTE Thanks
Old 06-30-04, 01:50 AM   #2
coin
Member

 
coin's Avatar 

Join Date: Jan 2003
Location: Denmark

 
I hate to burst your bubble but viruses can be hidden in a *.txt file. I don't think there are any file types that are immune to infection of some sort. Any virus code in a *.txt file is inert in that file as long as the .txt isn't changed to another file type.
coin is offline   QUOTE Thanks
Old 06-30-04, 02:22 AM   #3
hafa
Premium Member #24

 
hafa's Avatar 

Join Date: Apr 2003
Location: A tiny dot in the middle of the Pacific

 
Quote:
Originally Posted by coin
I don't think there are any file types that are immune to infection of some sort.
Are you certain? As far as I've been able to see, there's not yet a way to insert a virus into a jpg or gif file.

__________________
.
HTPC: Core i3 540/8GB/300GB Raptor/GTS450-1GB/W7P-64 ~|~ File Server: (Green) AMD 4850E/4GB/6TB RAID/Windows Server 2008 ~|~ Notebook/Workstation: M780 Toshiba Convertible Tablet/i7 M620/8GB/128GB Crucial M4 SSD /7200RPM 750GB/W8 Pro

hafa is offline   QUOTE Thanks
Old 06-30-04, 02:45 AM   #4
coin
Member

 
coin's Avatar 

Join Date: Jan 2003
Location: Denmark

 
found a site with better info, I was wrong and there are certain file types that can be assumed to be safe.
http://hoaxinfo.com/vprotect.htm
coin is offline   QUOTE Thanks
Old 06-30-04, 08:59 AM   #5
Zatrix
Member

 
Zatrix's Avatar 

Join Date: Jun 2004
Location: moving to ohio once 2012 gets closer

 
.com
.pif
.scr


theres one or 2 i missed

screensaver ones are the worst becase you can trick people so easily.
its either .scr or .src i fogot which one.
Zatrix is offline   QUOTE Thanks
Old 06-30-04, 10:23 AM   #6
SavageBasher
Member

 
SavageBasher's Avatar 

Join Date: Nov 2003
Location: Northeast PA

 
Anything can be a virus. Take an exe and rename it to a jpg. Now it looks like a jpg, but its still a virus.
SavageBasher is offline   QUOTE Thanks
Old 06-30-04, 10:29 AM   #7
David
Forums Super Moderator
Overclockers.com Lead Editor



 
David's Avatar 

Join Date: Feb 2001
Location: Hiding from Americans and making pretty colours in a drybox in St Andrews

10 Year Badge
 
I agree. When running a virus scan its best to just scan all files. I have been sent .doc files that have been virus infected before. Just run a full system scan and go get a cup of coffee and read a book for a while

Quote:
Originally Posted by SavageBasher
Anything can be a virus. Take an exe and rename it to a jpg. Now it looks like a jpg, but its still a virus.

__________________
David J. Nelson MChem(Edin) PhD(Strath) MRSC [ResearcherID: D-3927-2011]
OC Forums Super Moderator // Overclockers.com Editor


The Workhorse: [Lenovo W510] Intel Core i7-720QM / 8 GB DDR3 / nVidia Quadro FX880M / Crucial M4 256 GB SSD / Windows 7
The HTPC/Server: AMD Phenom X4 9650 / 6 GB DDR2 / nVidia 8300 / 5 TB of HDDs / Antec Solo II Case / Windows 7
The Gaming Rig: AMD Llano A6-3650 / 4 GB DDR3 / nVidia GTX260 / 2x 500 GB HDD in RAID0 / Antec Dark Fleet DF-85 Case / Windows 7
The Benchmarking Setup: Various LGA775 chips / Asus Rampage Formula / 2 GB OCZ 1066 MHz DDR2 / nVidia Quadro NVS 285 / 320 GB HDD / Windows 7

My research fellowship is eating all my time, so I may be slow to reply to emails and private messages.
David is offline Author Profile Benching Profile Folding Profile   QUOTE Thanks
Old 06-30-04, 01:15 PM   #8
Zatrix
Member

 
Zatrix's Avatar 

Join Date: Jun 2004
Location: moving to ohio once 2012 gets closer

 
if you rename a virus .jpg granted it will still BE virus BUT it wont execute. thus not infecting anyone
Zatrix is offline   QUOTE Thanks
Old 06-30-04, 01:29 PM   #9
I.M.O.G.
Glorious Leader

 
I.M.O.G.'s Avatar 

Join Date: Nov 2002
Location: Rootstown, OH

10 Year Badge
 
Any file can be a virus... And keep in mind that you don't have to directly execute the file (AKA you don't have to be a complete idiot to run the virus). Example:

I just got a case today where a user had 13 virus infections in files that are associated with autoCAD drawings... When the user opens the drawings, the virus has replaced associated files and is automatically executed by the program opening the drawing.

__________________
The OC Forums Way
We are a team. We are a community. We are a fellowship made strong by mutual respect and shared dedication to the task of enriching all who come here.
The OC Forums Thank You Thread
Put your computer to work for our OC Forum Teams!
Try out our POST TEMPLATES, they save you time answering common questions!

I spend half my money on CPUs, GPUs, and Liquid Nitrogen. The other half I waste.
I.M.O.G. is offline Author Profile Benching Profile Folding Profile Heatware Profile   QUOTE Thanks
Old 06-30-04, 02:30 PM   #10
twump
Member



Join Date: Jan 2002
Location: CA

 
jpegs can be a virus. we just had a problem on another forum i'm part of where someone hotlinked their avatar from some website and the jpeg contained a virus and infected numerous members when they loaded a thread the guy with the avatar posted on. this was not a renamed exe it had the picture show up.

if you want to configure your AV properly have it scan everything and don't look for things to exclude
twump is offline   QUOTE Thanks
Old 06-30-04, 02:35 PM   #11
Christoph
JAPH Senior

 
Christoph's Avatar 

Join Date: Oct 2001
Location: Redmond, WA

 
Since most image formats have comment fields, even valid images can contain a virus, although it would be difficult to execute them by accident. This page demonstrages that code can be hidden in jpgs and pngs and has some links to related sites.
I'm not saying that you should never look at jpgs for fear of getting a virus, but you shouldn't leave anything out when scanning for viruses either.

edit: For clarity, I realize that the site I linked to has compressed code embedded in images, and that you have to compile the code before it will do anything. You could use a similar technique to stick an executable in an image.

__________________
FoldSig | Heatware | Alt OS FAQWiki | JAPH | ADO

"Coming onto the forums after you've had a concussion is prolly not a good idea, but I'm doin' it anyways!"
-dark_15

Last edited by Christoph; 06-30-04 at 03:09 PM.
Christoph is offline   QUOTE Thanks
Old 06-30-04, 03:04 PM   #12
hafa
Premium Member #24

 
hafa's Avatar 

Join Date: Apr 2003
Location: A tiny dot in the middle of the Pacific

 
Quote:
Originally Posted by twump
jpegs can be a virus. we just had a problem on another forum i'm part of where someone hotlinked their avatar from some website and the jpeg contained a virus and infected numerous members when they loaded a thread the guy with the avatar posted on. this was not a renamed exe it had the picture show up.
Twump, do you have any more information about this, i.e., the name of the virus, a URL with the thread in question, etc... I'd really like to have some concrete information from one of the "majors" like symantec to put before our IT department on this issue.

__________________
.
HTPC: Core i3 540/8GB/300GB Raptor/GTS450-1GB/W7P-64 ~|~ File Server: (Green) AMD 4850E/4GB/6TB RAID/Windows Server 2008 ~|~ Notebook/Workstation: M780 Toshiba Convertible Tablet/i7 M620/8GB/128GB Crucial M4 SSD /7200RPM 750GB/W8 Pro

hafa is offline   QUOTE Thanks
Old 06-30-04, 03:14 PM   #13
Zatrix
Member

 
Zatrix's Avatar 

Join Date: Jun 2004
Location: moving to ohio once 2012 gets closer

 
just do ctrl+alt+delete to see if any processes have been added or deleted
go to start-run-msconfig-startup and see if anything that you dont know of has been added
go to netstat -n in dos to see if any wierd connections have been added

AND THE SURE FIRE WAY TO KNOW. if your firewall is on and loads next time you start up and nothing asks to connect then your safe.
Zatrix is offline   QUOTE Thanks
Old 06-30-04, 03:50 PM   #14
drenader
Member

 
drenader's Avatar 

Join Date: Nov 2003
Location: Austin

 
Scary, you must look in the unlikely places. Virus's are everywhere, just need to use some common sence and a good scanner.

__________________
"Death gotta be easy, 'cause life is hard It'll leave you physically, mentally, and emotionally scarred"
-50 Cent
drenader is offline   QUOTE Thanks
Old 06-30-04, 03:54 PM   #15
I.M.O.G.
Glorious Leader

 
I.M.O.G.'s Avatar 

Join Date: Nov 2002
Location: Rootstown, OH

10 Year Badge
 
Quote:
Originally Posted by Zatrix
just do ctrl+alt+delete to see if any processes have been added or deleted
go to start-run-msconfig-startup and see if anything that you dont know of has been added
go to netstat -n in dos to see if any wierd connections have been added

AND THE SURE FIRE WAY TO KNOW. if your firewall is on and loads next time you start up and nothing asks to connect then your safe.
Um, there are a lot of virii that will not be found by following those steps... I actually haven't come across any that can be found that way.

__________________
The OC Forums Way
We are a team. We are a community. We are a fellowship made strong by mutual respect and shared dedication to the task of enriching all who come here.
The OC Forums Thank You Thread
Put your computer to work for our OC Forum Teams!
Try out our POST TEMPLATES, they save you time answering common questions!

I spend half my money on CPUs, GPUs, and Liquid Nitrogen. The other half I waste.
I.M.O.G. is offline Author Profile Benching Profile Folding Profile Heatware Profile   QUOTE Thanks
Old 06-30-04, 04:11 PM   #16
Zatrix
Member

 
Zatrix's Avatar 

Join Date: Jun 2004
Location: moving to ohio once 2012 gets closer

 
well as long as you download from trusted places you will be FINE

also as long as your firewall works its 99% impossible for a trojan to get you.
Zatrix is offline   QUOTE Thanks
Old 06-30-04, 04:16 PM   #17
SavageBasher
Member

 
SavageBasher's Avatar 

Join Date: Nov 2003
Location: Northeast PA

 
Quote:
Originally Posted by IMOG
virii
vi·rus
n. pl. vi·rus·es

http://dictionary.reference.com/search?q=virus

No such word as virii or viri.
SavageBasher is offline   QUOTE Thanks
Old 06-30-04, 04:18 PM   #18
SavageBasher
Member

 
SavageBasher's Avatar 

Join Date: Nov 2003
Location: Northeast PA

 
Quote:
Originally Posted by Zatrix
well as long as you download from trusted places you will be FINE

also as long as your firewall works its 99% impossible for a trojan to get you.
You will be FINE as long as the "trusted place" doesn't get hacked.

The only firewall I use anymore is my Linksys router, I used to run Zonealarm also, but I had it for over a month and it caught nothing.
SavageBasher is offline   QUOTE Thanks
Old 06-30-04, 04:22 PM   #19
gustav
Member

 
gustav's Avatar 

Join Date: Sep 2003
Location: Folding in Illinois

 
Someone told me its impossible to put a virus in an MP3, so as far as I know thats true. I'm not entirely sure if this is true, so enlighten me if I'm wrong and please back it up if you do.
gustav is offline   QUOTE Thanks
Old 06-30-04, 04:31 PM   #20
drenader
Member

 
drenader's Avatar 

Join Date: Nov 2003
Location: Austin

 
That would be a good one, an mp3 with a virus. Could bring anti piricy memebers to a new level. EXTREME ANTI PIRICY MEMBERS beware, lol crazy idiots.

__________________
"Death gotta be easy, 'cause life is hard It'll leave you physically, mentally, and emotionally scarred"
-50 Cent
drenader is offline   QUOTE Thanks

Post Reply New Thread Subscribe


Overclockers Forums > Software > Internet, Networking, and Security
Internet, Networking, and Security Networking and Viruses/Malware trouble. Get the answers here.
Forum Jump

Thread Tools Search this Thread
Search this Thread:

Advanced Search


Mobile Skin
All times are GMT -5. The time now is 07:39 PM.
Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.
You can add these icons by updating your profile information to include your Heatware ID, Benching Profile ID or your Folding/SETI profile ID. Edit your profile!
X

Welcome to Overclockers.com

Create your username to jump into the discussion!

New members like you have made this the best community on the Internet since 1998!


(4 digit year)

Why Join Us?

  • Share experience
  • Max out your hardware
  • Best forum members anywhere
  • Customized forum experience

Already a member?