On Wed, 2005-02-09 at 11:51 -0500, jef moskot wrote:
> On Wed, 9 Feb 2005, Maxim Britov wrote:
> > > > P900\Beyonce Knowles - Crazy In Love (2).wav: Exploit.W32.MS05-002 FOUND
> > I don't know, but size is ~50-100KB.
> 
> If they're tiny files, are you sure they're actually wavs?
> 
> Maybe someone downloaded these things and instead of funky beats, they're
> full of Greek soldiers?

WAV files don't just have to be PCM audio.  I've seen (from the I Love
Bees site) MPEG Audio Layer-III data inside a WAV RIFF wrapper.  Since
these files were triggering the malformed RIFF scanner, this could very
well be the case.

-- 
Chris

_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Reply via email to