S
Shenan Stanley
Guest
Robert Macy wrote:
> Apologies for the jump in, but how can a *.txt, or a *.bmp or a
> *.doc or a *.xls etc be infected? I thought they were just data
> files and as long as the doc and xls don't have macros there can't
> be any potential for a virus. Have these files always had the
> potential to carry malwares and virii?
>
> Isn't it still possible to ctrl-alt-del and look at what is running
> and 'see' if something took over?
>
> Or, do the new forms 'say' they're legitmate applications when
> they're not?
You said it...
"I thought they were just data files..."
All files are just data files. How they are presented to you is determined
by what you view them with.
They can contain a lot of things you probably never see. Some files contain
metadata (use google.) Considering how you can compress files - do you know
how large a file *should* be even? What if I replaced your normal
executable for opening Microsoft Word with one I created that was larger -
but still seemingly acted the same - would you know the difference?
Open an executable file with notepad (pick a smaller one.) Know all that
was there?
You are speaking of "Task Manager" I assume (CTRL+SHIFT+ESC)? There are a
lot of applications that show you running processes - but do you even know
what all *should* be running?
I can write you (handwritten) a letter that says one thing to you - but to
someone else - something entirely different.
What if the application you are using to open things has a known security
flaw that can be taken advantage of? Automatically run something that can
be used to start something else that tagged along and so on?
--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html
> Apologies for the jump in, but how can a *.txt, or a *.bmp or a
> *.doc or a *.xls etc be infected? I thought they were just data
> files and as long as the doc and xls don't have macros there can't
> be any potential for a virus. Have these files always had the
> potential to carry malwares and virii?
>
> Isn't it still possible to ctrl-alt-del and look at what is running
> and 'see' if something took over?
>
> Or, do the new forms 'say' they're legitmate applications when
> they're not?
You said it...
"I thought they were just data files..."
All files are just data files. How they are presented to you is determined
by what you view them with.
They can contain a lot of things you probably never see. Some files contain
metadata (use google.) Considering how you can compress files - do you know
how large a file *should* be even? What if I replaced your normal
executable for opening Microsoft Word with one I created that was larger -
but still seemingly acted the same - would you know the difference?
Open an executable file with notepad (pick a smaller one.) Know all that
was there?
You are speaking of "Task Manager" I assume (CTRL+SHIFT+ESC)? There are a
lot of applications that show you running processes - but do you even know
what all *should* be running?
I can write you (handwritten) a letter that says one thing to you - but to
someone else - something entirely different.
What if the application you are using to open things has a known security
flaw that can be taken advantage of? Automatically run something that can
be used to start something else that tagged along and so on?
--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html