Skip to main content ↑ ↓

Notice

Please note that most of the software linked on this forum is likely to be safe to use. If you are unsure, feel free to ask in the relevant topics, or send a private message to an administrator or moderator. To help curb the problems of false positives, or in the event that you do find actual malware, you can contribute through the article linked here.
Topic: How to know if a flac file is infected? (Read 3632 times) previous topic - next topic
0 Members and 1 Guest are viewing this topic.

How to know if a flac file is infected?

Hi when I tried to open a Flac file, I get a gnome message telling that that file wasn't really a flac. I played it dragging it to my playlist instead of double clicking. This worked, but i searched google about that and found it http://www.kb.cert.org/vuls/id/544656
  My question is how can i recognize an infected flac file?
  If i infected myself (opening that flac) how can i know it, and solve that?

Thanks in advace.

How to know if a flac file is infected?

Reply #1 –
If the file contained some code, then it was probably intended for Windows. Since you need to su(do) an administrative operation (system intrusion), I wouldn't be concerned about infection (unless you launched your player as a superuser which I think you did not).

How to know if a flac file is infected?

Reply #2 –
Quote from: Martel on
If the file contained some code, then it was probably intended for Windows. Since you need to su(do) an administrative operation (system intrusion), I wouldn't be concerned about infection (unless you launched your player as a superuser which I think you did not).

Thanks for the info, as you said I launched the file as a normal user. But I dunno if it user could be compromissed.
This is the info about my libflac file
# aptitude show libflac7
Packet: libflac7
Versión: 1.1.2-8

libFLAC version 1.2.1 was released in September, 2007, fixing these vulnerabilities for most vulnerable applications.
In addition I want to know any way of checking the file to know if it has some code added, and how to clean it (if it is possible).
Thanks in advance.

How to know if a flac file is infected?

Reply #3 –
On linux, doubleclicking a file for playback does not rely on the filename extensions, but instead on mime/types. This implies that the file has to contain certain information in certain places to be considered one of such.
A player, instead, would usually trust what it is feed with, and the reading engine of the player may skip data if it is unknown.
I.E. one could add a jpg in front of an mp3 file and a player could skip the jpg and play the mp3, while a browser would see an image.

My guess is that you actually have something like what i have described. Look if it has an ID3 tag, or some other strange data in the beginning.