Malware, Viruses, Etc.

[Kim]

"According to David Marcus, security research and communications
manager for McAfee Avert Labs, users downloading audio and video
files can inadvertently download password-stealing Trojans or bot
software, which can be programmed to send spam, search for
passwords or sit quietly until commanded to act".

What kind of self-serving trip is this ?? No wonder computer users are
scared and end up buying Norton or McAfee products.

How do you put a virus, or malware, on a jpg, bmp, avi, mpg, etc. file ??

 

[Poprivet]

"According to David Marcus, security research and communications
manager for McAfee Avert Labs, users downloading audio and video
files can inadvertently download password-stealing Trojans or bot
software, which can be programmed to send spam, search for
passwords or sit quietly until commanded to act".

What kind of self-serving trip is this ?? No wonder computer users
are scared and end up buying Norton or McAfee products.

How do you put a virus, or malware, on a jpg, bmp, avi, mpg, etc.
file ??

It's pretty simple to do with the right abilities. They aren't as prolific
as they used to be, but there are still lots around.

 

[Kim]

It's pretty simple to do with the right abilities. They aren't as prolific
as they used to be, but there are still lots around.

I'm certainly NOT a computer expert, but please direct me to a newsgroup, or
website, that has a file with an extension of JPG, BMP, AVI, MPG, WMV, or
MP3 that contains an example of a jpg or avi extention with a virus or malware.

 

[Malke]

I'm certainly NOT a computer expert, but please direct me to a newsgroup, or
website, that has a file with an extension of JPG, BMP, AVI, MPG, WMV, or
MP3 that contains an example of a jpg or avi extention with a virus or malware.

Here you go:

http://www.google.com/search?hl=en&q=Windows+vulnerabilities+.wmv+files&btnG=Search

http://www.google.com/search?hl=en&q=Windows+vulnerabilities+.avi+files&btnG=Search

http://www.google.com/search?hl=en&q=Windows+vulnerabilities+.mpg+files&btnG=Search

Plain .jpg and .bmp files aren't usually a risk.


Malke

 

[Guest]

I'm certainly NOT a computer expert, but please direct me to a newsgroup, or
website, that has a file with an extension of JPG, BMP, AVI, MPG, WMV, or
MP3 that contains an example of a jpg or avi extention with a virus or malware.

No Body will give you or explain to you how to make this happen, which I can
tell is just stay away from the websites and don't open an Attachments or an
e-mail you don't know the sender.
Why would you like to go to such a website anyway, do you want to send
something bad to somebody you have an issue with, that's the meanest you can
get to if you thinking in a such deed, or you bugged with some advertising
companies and you want to get your own back?.
If you gone to that routes and you been spied upon by your ISP the least,
you can get for sure up to 30 Yeaeaeaeaearsrsrsrsrsrs behind bars with some
Rats and scum of life in the cell for this, stay away from it.
It take years of codding experience to master this Art, and if you know how
to code you will change your mind to be productive than destructive.
Bottom line stay in your shell you better off.
HTH.
Regards,
nass

 

[Kim]

Here you go:

http://www.google.com/search?hl=en&q=Windows+vulnerabilities+.wmv+files &btnG=Sea
&btnG=Sea
rch

Plain .jpg and .bmp files aren't usually a risk.


Malke

The links you provided all have to do with Direct X or Direct Show and
automatically opening files in WMP. I don't use WMP.
If I want to look at an AVI file in VLC Media Player, do I have to use Direct X or
Direct show ??
I still ask the same question. Show me a virus or malware ladden file I can
download with an AVI, MPG, MPEG4 or DIVX extention.

 

[Malke]

The links you provided all have to do with Direct X or Direct Show and
automatically opening files in WMP. I don't use WMP.
If I want to look at an AVI file in VLC Media Player, do I have to use Direct X or
Direct show ??
I still ask the same question. Show me a virus or malware ladden file I can
download with an AVI, MPG, MPEG4 or DIVX extention.

I'm sorry but I don't send viruses to people. I thought you wanted to
know if there were vulnerabilities in *.wmv or *.avi files or how people
can pick up malware from downloading those types of files. I'll give you
some links to security researchers if you want to see some processes and
learn how vulnerabilities can be exploited, but since I'm not sure what
you want to know or try, I'll bow out of this thread now.

http://www.benedelman.org/
http://www.vitalsecurity.org/
http://www.netrn.net/spywareblog/
http://insecure.org/
http://www.mnin.org/
http://www.securityfocus.com/


Malke

 

[Kim]

I'm sorry but I don't send viruses to people. I thought you wanted to
know if there were vulnerabilities in *.wmv or *.avi files or how people
can pick up malware from downloading those types of files. I'll give you
some links to security researchers if you want to see some processes and
learn how vulnerabilities can be exploited, but since I'm not sure what
you want to know or try, I'll bow out of this thread now.

http://www.benedelman.org/
http://www.vitalsecurity.org/
http://www.netrn.net/spywareblog/
http://insecure.org/
http://www.mnin.org/
http://www.securityfocus.com/


Malke

The whole point of my questions relates to the original quote in my original post.
Can someone "inadvertently" download a virus ? Unless one is completely
naive, I would have to say NO !!! Will I download a song with an EXE
extention?? Of course, NOT. Or how about a video with a COM extention ??
I don't think so. If the file has an extention I've never heard of, I'll "google" it and
find out more information. It SEEMS that people who have infected machines
may be LESS than careful about the files they "execute". That's all.

 

[RA]

The whole point of my questions relates to the original quote in my
original post.
Can someone "inadvertently" download a virus ? Unless one is
completely
naive, I would have to say NO !!! Will I download a song with an EXE
extention?? Of course, NOT. Or how about a video with a COM
extention ??
I don't think so. If the file has an extention I've never heard of,
I'll "google" it and find out more information. It SEEMS that people
who have infected machines
may be LESS than careful about the files they "execute". That's
all.

Maybe you won't download a song with an .exe extension or a video with .com
extension but there are hoards of people who will. Lots of folks out there
are 'completely naive'. So maybe instead of using the word "inadvertantly"
you could substitute "naively","unknowingly", unwittingly, or "stupidly".
So pat yourself on the back and keep Googling.

 

[DanS]

The links you provided all have to do with Direct X or Direct Show and
automatically opening files in WMP. I don't use WMP.
If I want to look at an AVI file in VLC Media Player, do I have to use
Direct X or Direct show ??
I still ask the same question. Show me a virus or malware ladden file
I can download with an AVI, MPG, MPEG4 or DIVX extention.

Kim, did you read the article(s) that the quote of David Marcus you posted
came from ?

This one explains 2 of those exploits:

http://pcworld.about.com/news/Dec022005id123808.htm

....which have been supposedly closed anyway.

But, using WMP & IE are the true problems with this issue, which is why I
use neither.

I know little about meta-data within video/audio files, but yes, that data
can be read by the program and executed.

For instance, many porn web pages that want to sell you porn post short
clips (WMV's) in the binary newsgroups. If you were to view the clip with
WMP, after it's over, it can open IE and go to the website's homepage. If
it can do that, I don't see why it couldn't d/l spyware too.

I blame MS. I use MediaPlayer Classic.

 

[Alan Moorman]

The links you provided all have to do with Direct X or Direct Show and
automatically opening files in WMP. I don't use WMP.
If I want to look at an AVI file in VLC Media Player, do I have to use Direct X or
Direct show ??
I still ask the same question. Show me a virus or malware ladden file I can
download with an AVI, MPG, MPEG4 or DIVX extention.

One of these days...... when you're least expecting it...




Alan Moorman

_____________________________________

DYSLEXICS OF THE WORLD UNTIE!

_____________________________________

 

[Alan Moorman]

The whole point of my questions relates to the original quote in my original post.
Can someone "inadvertently" download a virus ?

Sure. If the virus is hidden in a file you download,
you'll never know until it starts working in your computer.



Unless one is completely

naive, I would have to say NO !!!

You're so expert that you just can't believe it, eh?

Why do you think there ARE viruses?
Why do they attack computers?

Because people who are much more clever than you know how to
bury a virus in another file that your computer will have to
process, and BLAM, there it is.

And, I'm not talking about an .exe file, just a file, like a
picture or music file that your computer has to read
bit-by-bit.

Will I download a song with an EXE
extention?? Of course, NOT. Or how about a video with a COM extention ??
I don't think so. If the file has an extention I've never heard of, I'll "google" it and
find out more information. It SEEMS that people who have infected machines
may be LESS than careful about the files they "execute". That's all.

No, you're missing the point.

If your computer has to process every bit in a vile, there
are certain people who can figure out how to incorporate a
virus.

Just get over it! There ARE that kind of people out there!





Alan Moorman

The only reason some people get lost in thought
is because it's unfamiliar territory.

Paul Fix

=================================

 

[Pentium]

Code writers can inbed many types of files with virus code. If you have
"protection" with the latest signature files, it would likely catch the
"infected" file. THUS, if you didn't - what you thought was a .jpeg - was a
disguise - thus "inadvertently' downloading would be germain to your
question - and you could do it too!