Wav File Viruses

Firewalls, routers, servers, switches, SANs, PBXes, security and related topics
Locked
Fuzzy_Fox
Posts: 174
Joined: Tue Sep 14, 2004 9:31 am

Wav File Viruses

Post by Fuzzy_Fox »

One of my friends tried to send me some recordings they had made. I tried downloading them (in Hotmail), but it said they contained an uncurable virus and it wouldn't allow me to download it. I eventually got them sent on msn a few days later and they seemed fine. Any ideas what that was all about?

Archived topic from Iceteks, old topic ID:3145, old post ID:25709
Image

“Buttered toast always lands buttered side down; cats always land feet first; tie a piece of buttered toast onto the back of a cat and it can never hit the floor!”
User avatar
Red Squirrel
Posts: 29209
Joined: Wed Dec 18, 2002 12:14 am
Location: Northern Ontario
Contact:

Wav File Viruses

Post by Red Squirrel »

I don't think it's possible for a wav file to be a virus since it's not executable. But I guess it could still be corrupted and have the virus put into it, but opening it would not execute the virus. I guess there could be exeptions such as wmp exploits or something. But if it plays fine it's probably safe. probably... :D

Archived topic from Iceteks, old topic ID:3145, old post ID:25710
Honk if you love Jesus, text if you want to meet Him!
Cold Drink
Posts: 96
Joined: Fri Jul 16, 2004 1:04 pm

Wav File Viruses

Post by Cold Drink »

What Red said ;)

Plus, virus are identified by small "signature" strings. Who's to say this are globally uniuqe? A virus definition could contain an inaccurate string and cause software to think its a virus, but it might just be harmless.

Archived topic from Iceteks, old topic ID:3145, old post ID:25712
User avatar
manadren_it
Posts: 1810
Joined: Wed Jan 01, 2003 6:48 pm

Wav File Viruses

Post by manadren_it »

Well there are such things as viruses in media files, as Red mentioned the wmp exploits, and there was also reports of mp3 viruses a while back. But as the files themselves are not executable, the problem, the exploit, lies within the player, not the file, so if your version of winamp or whatever you use to play the file is up to date, you should be ok.

Most likely it's a false positive. Either a small part of the file is malformed, enough to put hotmail on alert, but not enough to inhibit playback. Or part of the file's code looks similar to that of a virus, but is completely coincidental. Kinda like what Cold Drink said. It's rare, but it happens.

Archived topic from Iceteks, old topic ID:3145, old post ID:25717
mana's blog {1, 2} yell at me when I get lazy
Locked