The sky is falling the sky is falling...

[johno]

"New Virus Can Infect Picture Files"

PLEASE!!! tell me we are in sweeps again.

The author waits until the very end to state "an infected JPG file cannot infect another computer on its own"

Gheez..

Go McAfee's AVERT page and you learn that its a standard virus.

With a standard infection vector of a executable that looks for trigger data in a picture file. No different then one that looks for specific files, dates, URLs, etc. It is just looking in a data file for the trigger then just the presence of a specific type of file.

The only thing different is that the trigger data contains the code for what action to take.


http://vil.nai.com/vil/content/v_99522.htm

Comments

[sinboy.livejournal.com]

Yeah, a .pe. file. Like i'll ever execute one if it shows up in my mailbox...

Feh. Sensationalistic BS.

[mikz.livejournal.com]

Meanwhile, I'm still using the same ol' text-based
mail client that I was using 12 years ago, where
I need to open files manually, and since I don't
run it on Windows, even an .exe can't do any
damage. As a result I've never, ever received any
e-mail viruses.

It's funny how the media never gives sensible
advice like "don't use stupid, spanky mail clients
that do things without checking in with the user
first", because they know that said software is
written by a company big enough to buy them out
and put them out of a job. =)

Re:

[sinboy.livejournal.com]

What? You exepct people to figger out how to use a non GUI based email client?

People are stupid. That's how viruses get spread in the first place.

Re:

[johno.livejournal.com]

Amen!

"Hi, Newbie. We're going to assume you're as dumb as rock and make assumptions on how you want to work. Autorun an exe, no problem. Hide extension information from you, no problem. Let random email run scripts, programs, modify system params, no problem."

[mactavish.livejournal.com]

I know how to use text-based email, I just don't like it.

That said, I've gotten one virus though email, ages ago, and haven't since then. I have a virus checker on all my mail, and it scans my disk weekly, as well. It's not hard to avoid viruses with windows, if you know what to do.

[sinboy.livejournal.com]

The author still implies that an "infected" image file can be sent to infect other computers without the .pe file being needed.

"In its current form, an infected JPG file cannot infect another computer on its own. But Gullotto said there's no reason a virus writer couldn't make the picture itself able to infect other computers."

How? Given that the program needs the EXTRK.EXE to do anything, where does this Gullotto person expect it to come from? Not the .jpg file, right? So from where?

Stupid razzamatazzing frazzle razzlers

Re:

[sinboy.livejournal.com]

Oh, I don't use a text based emailer either. I know how to. I can figure out how to use pretty much all of them. It's people who can't figure them out that bug me. People who open file types they don't recognize bug me.

People who can't figure out text based email programs and operate on networks that will cost millions if they crash while using software lik Outlook express really bug me.

The fact that so many of them are still employed bugs me even more.

[mactavish.livejournal.com]

My former employers required Outlook.

[jenk]

Uh, I don't think even lookout autoruns .exes in the default config. the preview pain must be turned on.

But I could be wrong...I haven't set it up in years...

Re:

[johno.livejournal.com]

They did finally change that one, but for several years it was possible to have exe's run.

Java, javascript and vbscript all do currently autorun. Yech!

Re:

[johno.livejournal.com]

Major difference, you've made the active choice.

Many folks just take what they're given with no thought.