LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 09-23-2020, 12:49 AM   #1
kangaroobop4
LQ Newbie
 
Registered: Sep 2020
Posts: 6

Rep: Reputation: Disabled
Will my dvd/cd get infected if I put it into an infected computer?


i need to burn a .iso to a dvd or cd but the only computer i can do it on has been infected with malware in the past. if my computer has malware and i put a blank dvd or cd on it, will it get infected before i burn the .iso even if the checksum is accurate after the burn? It is a 1x only write which makes me think that if malware writes to it first, then the .iso shouldn't be allowed to write to it. I don't know.

Last edited by kangaroobop4; 09-23-2020 at 12:53 AM.
 
Old 09-23-2020, 01:34 AM   #2
lucmove
Senior Member
 
Registered: Aug 2005
Location: Brazil
Distribution: Debian
Posts: 1,433

Rep: Reputation: 110Reputation: 110
No, malware doesn't infect .iso images. Malware only infects executables and there have been very few reports of PDF, MS Word and image files (such as JPG) being infected.

Besides, as you have pointed out yourself, the checksum can confirm that the burned CD/DVD image is faithful to the image.
 
Old 09-23-2020, 02:25 AM   #3
JJJCR
Senior Member
 
Registered: Apr 2010
Posts: 2,150

Rep: Reputation: 449Reputation: 449Reputation: 449Reputation: 449Reputation: 449
Exclamation

Quote:
Originally Posted by lucmove View Post
No, malware doesn't infect .iso images. Malware only infects executables and there have been very few reports of PDF, MS Word and image files (such as JPG) being infected.

Besides, as you have pointed out yourself, the checksum can confirm that the burned CD/DVD image is faithful to the image.
If the source is already affected with malware before creating the ISO. Then when you create the ISO, of course the malware will also be part of the ISO.

Even if the source is clean, who knows maybe some out there knows how to inject a malware to an ISO image.

Nowadays, if a bad actor discovers a vulnerability. They will fully enjoy it to the fullest; until someone notice it and close the vulnerability.
 
1 members found this post helpful.
Old 09-23-2020, 03:46 AM   #4
fatmac
LQ Guru
 
Registered: Sep 2011
Location: Upper Hale, Surrey/Hants Border, UK
Distribution: Mainly Devuan, antiX, & Void, with Tiny Core, Fatdog, & BSD thrown in.
Posts: 5,493

Rep: Reputation: Disabled
Simple answer - no - you are burning an image to your disk - & the checksum will verify it.
 
Old 09-23-2020, 05:56 AM   #5
masterclassic
Member
 
Registered: Jun 2007
Distribution: Knoppix, antiX
Posts: 252

Rep: Reputation: 73
A further security measure can be to boot Linux from a live USB and use that system to burn your CD/DVD disc.
 
1 members found this post helpful.
Old 09-23-2020, 07:46 AM   #6
kangaroobop4
LQ Newbie
 
Registered: Sep 2020
Posts: 6

Original Poster
Rep: Reputation: Disabled
if I put the dvd/cd in the computer with malware i would think the dvd/cd gets infected right away, maybe...? can adding the iso remove that?
 
Old 09-23-2020, 12:32 PM   #7
teckk
LQ Guru
 
Registered: Oct 2004
Distribution: Arch
Posts: 5,138
Blog Entries: 6

Rep: Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827
So you are going to ignore everything that was said to you and continue on?

Was the CD/DVD finalized after it was burned? Then it can't be written to. Is this a CD/DVD ROM? Then it can't be written to. Is this a writable disk that is ready to be written to? Who knows. Malware can write to disks.

Last edited by teckk; 09-23-2020 at 12:34 PM.
 
1 members found this post helpful.
Old 09-23-2020, 01:39 PM   #8
dc.901
Senior Member
 
Registered: Aug 2018
Location: Atlanta, GA - USA
Distribution: CentOS/RHEL, openSuSE/SLES, Ubuntu
Posts: 1,005

Rep: Reputation: 370Reputation: 370Reputation: 370Reputation: 370
Best solution to never get infected from malware is to never plugin the computer to any network, and never plugin any removable media, and never load any unknown software that you do not trust, and few other things.

Last edited by dc.901; 09-23-2020 at 01:40 PM. Reason: cannot find emoji for sarcasm
 
Old 09-23-2020, 01:55 PM   #9
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,636

Rep: Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965
Quote:
Originally Posted by kangaroobop4 View Post
i need to burn a .iso to a dvd or cd but the only computer i can do it on has been infected with malware in the past. if my computer has malware and i put a blank dvd or cd on it, will it get infected before i burn the .iso even if the checksum is accurate after the burn? It is a 1x only write which makes me think that if malware writes to it first, then the .iso shouldn't be allowed to write to it. I don't know.
This sounds familiar: https://www.linuxquestions.org/quest...ed-4175681693/
 
3 members found this post helpful.
Old 09-26-2020, 08:37 AM   #10
masterclassic
Member
 
Registered: Jun 2007
Distribution: Knoppix, antiX
Posts: 252

Rep: Reputation: 73
In case you used mswindows default cdr/dvd-rw burning software to burn discs, please know that since windows vista this software doesn't finalize the disc. The disc remains "open" so that you can add more files later (it is called 'live' format). This means that you can't exclude infection if some malware is running on the computer. That's why I advised to boot the system from a Linux live usb that is more secure, plus the checksum test.
 
Old 09-26-2020, 12:29 PM   #11
kangaroobop4
LQ Newbie
 
Registered: Sep 2020
Posts: 6

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by JJJCR View Post
If the source is already affected with malware before creating the ISO. Then when you create the ISO, of course the malware will also be part of the ISO.

Even if the source is clean, who knows maybe some out there knows how to inject a malware to an ISO image.

Nowadays, if a bad actor discovers a vulnerability. They will fully enjoy it to the fullest; until someone notice it and close the vulnerability.
Yes, this is what I am referring to. I put the dvd into the malware infected computer. The dvd gets infected. Then I burn the iso to it, but then the checksum is good. Could the malware be somewhere else on the dvd-r?
 
Old 09-26-2020, 12:31 PM   #12
kangaroobop4
LQ Newbie
 
Registered: Sep 2020
Posts: 6

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by lucmove View Post
No, malware doesn't infect .iso images. Malware only infects executables and there have been very few reports of PDF, MS Word and image files (such as JPG) being infected.

Besides, as you have pointed out yourself, the checksum can confirm that the burned CD/DVD image is faithful to the image.
thanks for your input. i think some malware can infect .iso images, but, on the other hand, most malware probably can't.
 
Old 09-26-2020, 12:34 PM   #13
kangaroobop4
LQ Newbie
 
Registered: Sep 2020
Posts: 6

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by masterclassic View Post
A further security measure can be to boot Linux from a live USB and use that system to burn your CD/DVD disc.
are you saying that malware that is already present on the computer, like in the firmware, not the hdd, can not transfer to the dvd?
 
Old 09-26-2020, 12:36 PM   #14
kangaroobop4
LQ Newbie
 
Registered: Sep 2020
Posts: 6

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by teckk View Post
So you are going to ignore everything that was said to you and continue on?

Was the CD/DVD finalized after it was burned? Then it can't be written to. Is this a CD/DVD ROM? Then it can't be written to. Is this a writable disk that is ready to be written to? Who knows. Malware can write to disks.
i think it was finalized. it is a dvd-r in a rw dvd player. i'm concerned about what happens to the dvd if it gets malware on it BEFORE burning the iso. even if the checksum is good, could that malware (we'll assume is on there) be somewhere else on the disk? on one hand, i would think no b/c the iso was burned to the entire disk. on the other hand, where does the malware go then? thanks for your input.

Last edited by kangaroobop4; 09-26-2020 at 12:39 PM.
 
Old 09-27-2020, 12:20 PM   #15
Hermani
Member
 
Registered: Apr 2018
Location: Delden, NL
Distribution: Ubuntu
Posts: 261
Blog Entries: 3

Rep: Reputation: 113Reputation: 113
Quote:
Originally Posted by TB0ne View Post
This is getting troublesome. Does LQ log IP adresses?
 
1 members found this post helpful.
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Computer is INFECTED according to ClamAV davidlu766 Linux - Security 3 04-11-2010 07:12 PM
It seems that my computer has been infected with trojans. How to fix it? Thx. whepin Linux - Security 15 01-08-2010 01:43 PM
Setting up a separate network for infected computer. sgb77 Linux - Networking 4 08-07-2008 10:37 AM
I got lots of dvd movies I like to put on my computer and I using suse 10.0. But I`m schneemann SUSE / openSUSE 1 01-19-2006 07:34 PM
DVD-R, DVD+RW, DVD-RW and DVD+R zetsui Linux - Hardware 5 09-12-2003 06:15 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 09:25 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration