unrar viruses?

Discussion in 'other security issues & news' started by C.S.J, Jan 6, 2007.

Thread Status:
Not open for further replies.
  1. C.S.J

    C.S.J Massive Poster

    Joined:
    Oct 16, 2006
    Posts:
    5,029
    Location:
    this forum is biased!
    hello,

    is there a way to unrar a virus, without it affecting the machine?

    as i want to test something, can this be done?
     
    C.S.J, Jan 6, 2007
    #1
  2. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    10,221
    Hello,
    Do you mean it comes inside an archive? Or actually unpack the virus itself?
    If it's merely rared or zipped you can safely unrar or unzip it. It is not executed when you do that.
    Mrk
     
    Mrkvonic, Jan 6, 2007
    #2
  3. nadirah

    nadirah Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    3,647
    Winrar has a Viruscan feature.
     
    nadirah, Jan 6, 2007
    #3
  4. lucas1985

    lucas1985 Retired Moderator

    Joined:
    Nov 9, 2006
    Posts:
    4,047
    Location:
    France, May 1968
    If they are SFX archives, you are at danger. SFX allows scripting.
    Test them in VMs.
     
    lucas1985, Jan 6, 2007
    #4
  5. nadirah

    nadirah Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    3,647
    Ah yes, programs like shadow.... and deep freeze are useful in this situation. They isolate the whole machine, sandbox it. Reboot to discard changes.
     
    nadirah, Jan 6, 2007
    #5
  6. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    Perhaps I am mis-understanding but you can extract contents of an SFX archive without being infected.

    What is a SFX-archive?
     
    Bubba, Jan 6, 2007
    #6
  7. lucas1985

    lucas1985 Retired Moderator

    Joined:
    Nov 9, 2006
    Posts:
    4,047
    Location:
    France, May 1968
    You are right. I was thinking on direct execution of SFX files.
     
    lucas1985, Jan 6, 2007
    #7
  8. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    10,221
    Hello,
    That would be execution as of any other .exe.
    Mrk
     
    Mrkvonic, Jan 6, 2007
    #8
  9. C.S.J

    C.S.J Massive Poster

    Joined:
    Oct 16, 2006
    Posts:
    5,029
    Location:
    this forum is biased!
    its a winrar file, so is it ok to unrar it?
     
    C.S.J, Jan 7, 2007
    #9
  10. dawgg

    dawgg Registered Member

    Joined:
    Jun 18, 2006
    Posts:
    818
    yes, as long as you don't execute it
     
    dawgg, Jan 7, 2007
    #10
  11. Longboard

    Longboard Registered Member

    Joined:
    Oct 2, 2004
    Posts:
    3,238
    Location:
    Sydney, Australia
    Longboard, Jan 9, 2007
    #11
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...