when downloading movies, series and anime they mostly come in those formats. Can they contain virus? if yes, do they get detected with antivirus?

  • Decipher0771@lemmy.ca
    link
    fedilink
    English
    arrow-up
    41
    ·
    1 year ago

    Sure. Whether they’re effective and actually able to execute is another question.

    A simple way might simply be to put an actual executable in the file instead, and when a user double clicks to open it it’ll run instead. Or there’s stuff to hide in metadata that could exploit particular players, or even some OS preview systems, and get execution that way.

    But……really pretty unlikely. Possible definitely, but you’d have to go through a lot of effort to get hit by something.

  • heartlessevil@lemmy.one
    link
    fedilink
    English
    arrow-up
    34
    ·
    1 year ago

    Hypothetically yes. But consider that much like a virus growing in a petri dish, it needs an appropriate environment. A mp4/mkv/whatever file sitting on your hard drive that you never access is not going to be problematic. Even when you do access it, it is probably is not going to do anything unless you also open it in the viewer that the malware author intended the payload for. There is no general purpose video decoding malware. They target the players.

  • veloute@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    22
    ·
    1 year ago

    for the most part, you’re safe; because media files aren’t executable (like exe, appimage, etc) including a virus in the file wouldn’t do much. there could be a zero-day (e.g buffer overflow in the media file that exploits a flaw in the player/decoder, but that isn’t anywhere near as common as including malware in executable files.

  • hinterlufer@lemmy.world
    link
    fedilink
    English
    arrow-up
    21
    ·
    1 year ago

    There are a bunch of vulnerabilities for VLC for example. Some of them are based on modified .avi or .mkv files.

    Note that those are all known and already patched but there are certainly some vulnerabilities out there that are unknown and/or unpatched. You’re quite unlikely to get one of those though.

    The biggest security issue probably is an unpatched system so don’t forget to keep your software up to date.

  • Potatos_are_not_friends@lemmy.world
    link
    fedilink
    English
    arrow-up
    8
    ·
    1 year ago

    Every time questions like this get asked, I get interested in seeing if it’s possible and try to get a proof of concept out. I wonder how many people are like me.

    • WarmSoda@lemm.ee
      link
      fedilink
      English
      arrow-up
      5
      ·
      edit-2
      1 year ago

      OP left out thier real question at the end:
      And how do I make them?

    • QuarterlySushi@kbin.social
      link
      fedilink
      arrow-up
      3
      ·
      1 year ago

      Sure, but the difference is that VLC can’t execute code, and if you change the file extension to MP4 then a media player is going to try to open it.

      So yeah it could contain a virus, but I think getting hit with that code is almost completely impossible.

  • HurlingDurling@lemm.ee
    link
    fedilink
    English
    arrow-up
    4
    ·
    edit-2
    1 year ago

    Absolutely. Hell, hackers have managed to hide complete documents into image files so when you open the file you see only a vacation foto, but using special software, they can remove the secret document.

    • PupBiru@kbin.social
      link
      fedilink
      arrow-up
      13
      ·
      1 year ago

      kinda different there though… it’s trivial to add whatever data you like to images etc (and that’s without even resorting to steganography), but that data is only accessible with an application. i believe the question was intended as whether you could get a virus from downloading/playing media files… the content of that “hidden data” isn’t executable, so whilst it’s reasonable to say it’s possible to transport a virus via hidden data in media, it’s not reasonable to say that you can “get” a virus using that same method alone

  • wildbus8979@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    1 year ago

    Yes they can, exploits in codecs are not unheard-of. Antivirus detect known malware, regardless of file type