My MP3 has a virus!

[hassi]

Since you guys operate the most popular mp3 player in the world I'd guess you'd know more about it then anyone so i'll ask you: is it possible for mp3s (real mp3s, with the .mp3 extension) to contain a virus? According to this article it is. I've tried to reason with the guy (that's why it says "People send me notes saying, 'Don't try to scare people about things that don't exist yet'"), I even sent him to a computer virus FAQ that states <BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Since virus code must be executed to have any effect, files that the
computer treats as pure data are safe. This includes graphics and sound files such as .gif, .jpg, .mp3, .wav, etc<HR></BLOCKQUOTE> but he still insists mp3s can contain viruses.

Usually I wouldn't care but I'd hate for someone out there to abandon mp3s simply because of his article and it kinda burns me up when sites who are suppose to be knowledgeable and trustworthy get their information way wrong and then tell the whole world.

Would you please e-mail stroligo@erols.com and maybe add it to your FAQ?

Thanks guys for your help,

james

edit: misspelled some things and fixed UBB code

[This message has been edited by hassi (edited December 08, 2000).]

[hassi]

sorry double post

[This message has been edited by hassi (edited December 08, 2000).]

[Twilightseer]

hassi,

I read the article you mentioned very quickly. The author did not say that mp3 files in themselves could contain viruses, he simply stated that some viruses could damage mp3 files after infecting a system, which is an already known fact. If I remember correctly, one of the side effects of the I Love You Virus was to damage mp3s. It didn't mean that the virus was actually included within the files. And I highly doubt that anyone could abandon the mp3 format, even if such viruses actually existed (as far as I know, macroviruses do not prevent people from using MS-Word, for instance).


------------------
Twilightseer

Life isn't funny. Don't you know that ?

[hassi]

Ok, try this article
<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Wouldn't be surprised if a couple on the fringes actually started incorporating real viruses into fake songs.
(later in article)
I certainly hope record companies begin to send viruses in their spoofed files, then I can sue their ass. <HR></BLOCKQUOTE>
it's written by the same guy

edit: messed up UBB code

[This message has been edited by hassi (edited December 08, 2000).]

[Twilightseer]

hassi,

I've read the second article. It never mentions how the virus could actually be included in the file. In fact, the article's author never gives any technical data about any "MP3 virus". All he does is conjecture and say "If this happened, then...". I'm not sure about what he's been trying to do. He seems to say "Well, there's no reason to worry, but if there was one, then you should worry". So, what's the point in all this ?

------------------
Twilightseer

Life isn't funny. Don't you know that ?

[monocle]

<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by hassi:
Usually I wouldn't care but I'd hate for someone out there to abandon mp3s simply because of his article<HR></BLOCKQUOTE>

People are sheep anyway. If they believe it...let 'em.



------------------
Monocle
Hear great techno music by Monocle at http://www.mp3.com/monocle. CD now on sale!

[DJ Egg]

Yeah, but as the title of this thread suggests, do you actually have an MP3 that contains a virus ?
As previously mentioned it's not currently possible, but yes, MP3's can certainly be affected by viruses.
Make sure you have top AntiVirus protection with the latest DAT signature files and run it regularly to check all files on your system. Also make sure that "auto clean infected files" is selected in the Options.
I suppose it's definitely possible to disguise a virus with the MP3 extension, though most decent players should detect & reject it, & top AV software should deal with any such file/s accordingly.
Best AV Software = Norton AV (not free) or my preferred choice InoculateIt PE
Don't trust McAfee, it's been proved to be crap.

-------
DJ-Egg

[hassi]

<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>I suppose it's definitely possible to disguise a virus with the MP3 extension, <HR></BLOCKQUOTE>

how? how would the virus execute in order to infect the computer? Wouldn't the mp3 player say something to the fact that the file is not a valid mp3? Can mp3 players execute code contained inside a mp3?

[DJ Egg]

<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by DJEgg:

I suppose it's definitely possible to disguise a virus with the MP3 extension, though most decent players should detect & reject it, & top AV software should deal with any such file/s accordingly.
<HR></BLOCKQUOTE>

[hassi]

<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>though most decent players should detect & reject it<HR></BLOCKQUOTE>

ok, which would not detect and reject it? I don't think it'd be much of a "detect and reject" process, it just wouldn't work, it's like taking a .txt doc and changing it to .mp3, it simply doesn't work.

edit: i hate ubb



[This message has been edited by hassi (edited December 10, 2000).]

[Reverend Ike]

hassi -

I think you're arguing semantics. You and DJ Egg are saying exactly the same thing: the default MP3 program would not open/play an executable file that just has an MP3 extension tacked-on.

It's quite simple. Nothing can do bad, evil, vicious things unless it is executed. MP3 files are never executed by a system, and hence can not cause damage to a system. They may be corrupted/deleted/mangled by viruses, and portions of them may be overwritten by actual executable virus code, but that doesn't mean that the computer will wake up one day and say, Hey, let's go execute this MP3 overwritten with a virus. Of course, if some moron makes his extensions hidden in Windoze Explorer, and then goes and clicks on LUSERSMUSTBURN.MP3.EXE or such trickery, then they rightfully deserve what they get.

[DJ Egg]

Good point STL.
Ofcourse, that's how many virus writer's think & operate.
Windows hides extensions by default, which is another major Micro$oft screwup.
That's how the ILoveYou bug got thru'.
People could only see ILoveYou.txt & not the .vbs or .exe at the end.
We still get posts on the forums from people that don't even know about the Folder Options -&gt; View tab settings.
Very sad!

Anyway, can we now finally say that this topic is done & dusted.