Can a .GIF contain a virus? - Page 2

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View

Re: Can a .GIF contain a virus?

On Sun, 16 Jul 2006 02:16:00 GMT, "David H. Lipman"

Quoted text here. Click to load it

It's not a GIF file, David. It has the header of a CHM file. There's a
compressed (and encrypted?) EXE "inside it" that Kaspersky identifiies
as SCHOVE.EXE. It's in this EXE file that KAV identifies

I guess the malware author is depending on that quirk in Win XP
where under certain conditions the OS will execute based on file
type rather than on file extension???

Thanks for sending me the sample. I don't see my JPG-SCAN proggy
detecting this kind of file since it seems the av vednors are at
least starting to develop detection for it. We shall see.


Site Timeline