Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 2 down vote favorite

Is there a website or free downloadable program that allows a user to identify and remove multiple types of malware from an ISO file?

share|improve this question
Can malware infest an image file? I mean, beside naming an executable on Windows NudeJenniferLopez.jpg.exe and praying someoe is dumb enough to click it, does any image file format have enough executable or interperable parts to carry malware? – Bruce Ediger Nov 9 '12 at 3:44
It would not be executable in itself directly, but say you're part of a botnet, it could issue updates through fully functioning bitmap (.bmp) pictures for example. However; as far as I know at least, the non-malware part must be stripped off. Proof of concept here: klevjers.com/dev/Bitmapper/Bitmapper.java – Henning Klevjer Nov 9 '12 at 7:10
The image could exploit a vulnerability in a popular image viewer or codec, like the old ANI vulnerability in Windows. – Polynomial Nov 9 '12 at 10:28

1 Answer

up vote 1 down vote

it could issue updates through fully functioning bitmap

So you're talking about stripping out steganography rather than neutralizing malware - in which case you'd get some mileage out of converting the file format (then possibly converting it back again). However it is technically possible to embed the content in such a way that it is still recoverable (IIRC the hidden WoW user id is extractable from a photo of the screen in addition to a direct image grab) e.g. if the image is of a barcode, then converting the format is not likely to disrupt the value embedded in the bar code.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.