Jump to content

viruses in mp3 and wmv files


kyle14710

Recommended Posts

All file types, including mp3 and wmv, *can* contain viruses *if* the software reading them has flaws in it.

 

 

 

I am not aware of any mp3-borne viruses thus far, although there was an exploit involving WMV files in 2005 and also seperate exploit last year involving WMF files.

 

 

 

The method a virus uses to get on your computer does not affect the end result.

 

 

 

Running a decent anti-virus program and keeping Windows updated should protect you from currently-known exploits.

Link to comment
Share on other sites

It has happened that MP3 files have been infected through their ID3 tags, though I think most modern programs are now impervious to those exploits.

 

 

 

The larger and more real risk in downloading music is from viruses that may be packaged alongside the files, as opposed to in them.

fractalsignature2lq4.jpg
Link to comment
Share on other sites

Pure mp3's and wmv files are impurvious to viruses, worms and things like that. As said before, the only real risk to these types of files are tag along files. Currently there is no known viruses around that can go around in MP3's.

Link to comment
Share on other sites

If you have an up-to-date sound/video player then you won't need to worry about plain .mp3 or .wmv files. However be cautious with archive files like .zip's, .rar's, .tar's and .z's since these can contain just about anything. And be very cautious with [dot - censor]exe files since these can do pretty much anything.

Link to comment
Share on other sites

Some audio/video files try to make you download a codec which IS a virus, and the file may sometimes not match it's filetype.

 

 

 

There is also the "double extension" trick, where a file ends im ".mp3[Caution: Executable File]" and the [Caution: Executable File] bit is normally hidden.

 

 

 

Darn filter, you know what I mean!!!

Link to comment
Share on other sites

Yes, that's something that catches out those who have 'hide extensions for known file types' selected. Though god knows why anyone would have such an option checked.

fractalsignature2lq4.jpg
Link to comment
Share on other sites

Yes, that's something that catches out those who have 'hide extensions for known file types' selected. Though god knows why anyone would have such an option checked.

 

 

 

MS in their infinite wisdom turned it on by default. That's one of the first things I turn off on a new system. Annoying as hell not knowing what kind of file I'm clicking on.

Link to comment
Share on other sites

it is possible to bind a virus into the code of ANY type of file.

 

 

 

No it's not.

 

 

 

Yes it is.

 

 

 

 

 

you can put virus code into .txt for example it just wont do anything harmful because of how your computer treats it.

 

 

 

Rename that file to [Caution: Executable File] however and you have a different situation. It all comes down to how your system uses the code inside the file that counts.

~Dan64Au

Since 27 Aug 2002

Link to comment
Share on other sites

you can put virus code into .txt for example it just wont do anything harmful because of how your computer treats it.

 

Exactly, you can't "bind a virus" to a .txt file because ascii text files are not executable in any way shape or form.

 

 

 

Rename that file to [Caution: Executable File] however and you have a different situation.

 

Not really because [Caution: Executable File] files are binary files and a .txt is ascii. Rename it to a .js or .vbs and you will be able to run code, however you're not binding a virus to the file, merely expecting the user to run your code.

siganizq4.gif
Link to comment
Share on other sites

you can put virus code into .txt for example it just wont do anything harmful because of how your computer treats it.

 

Exactly, you can't "bind a virus" to a .txt file because ascii text files are not executable in any way shape or form.

 

JPG files aren't executable, but have carried viruses.

 

WMV files aren't executable, but have carried viruses.

 

WMF files aren't executable, but have carried viruses.

 

ANI files aren't executable, but have carried viruses.

 

 

 

You may spot a pattern...

 

Not really because [Caution: Executable File] files are binary files and a .txt is ascii. Rename it to a .js or .vbs and you will be able to run code, however you're not binding a virus to the file, merely expecting the user to run your code.

 

If there was a flaw in the program associated with .txt files then a virus would be possible. It just so happens that text editors tend not to be amazingly complicated and so such a flaw is unlikely.

 

 

 

There is no real distinction between ASCII/binary files - ASCII is just a map which assigns numbers to human-readable characters. Every file is ultimately stored as 1s and 0s.

 

 

 

A file does not have to contain contain human-readable text to have a .txt extension, either.

 

 

 

Edit: I should also point out that ASCII isn't the only encoding used in .txt files.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.