iTunes mp3s plant malware and destructive content

Author
tony_de2003
Max Output Level: -88 dBFS
  • Total Posts : 144
  • Joined: 2007/01/28 16:42:06
  • Status: offline
2011/08/01 14:07:12 (permalink)

iTunes mp3s plant malware and destructive content

Hi, looking for similar experiences here. I use SONAR 8 Producer purly as a "hobyist" for no commercial gain.

I recently did a friend a favour by putting together a simple medly of dance music for a relative's wedding. This was simply fot use as the bride and groom's lead off to start the dancing. There were no copyright infringements as the mp3s had been purchased legally by the user and were being used for his own purposes in a none commercial situation. The hired DJ was a fully performing rights registered, and paid monthly dues commensurate with the recorde paid.

All I did was loaded them into Producer 8 and edited them into a continuous dance spot for the person that purchased them. No commercial situation existed. Simplya favour to a freind. I had no idea of the source of the files at the time, they were given to me on a stick and passed all virus tests.

What happened was the moment I tried to save the master file, SONAR froze, and a spurious message popped up telling me to format my hard disk before I could use it (as f*****g if!). As it happens I did not fall for that one.Further all coms to my MOTU interface were severed and the messhge said "turned off or disconnected". Ib fact, the MOTU was on and workjing fine. To cut a long story short, after re-installing drivers and re-configuring ad nauseum, I have only partiall functionality. The hard disc in use at the time (external Seagate drive) works fine on my business PCs but is denied access when connected to the DAW. As all my project files are on it, I am in deep sh1t!

It seems to me that I have been the victim of a paranoic iTunes anti piracy protection system. It appears that the files contain some sort of bomb, and indescriminately trash the system in use. I am having the files analysed, and I intend to take legal action to recover my losses. I am in England, and English laws prevail.

I repeat, the files were legally purchsed in England from the UK iTunes site and were being used within the provisions of UK copyright law by the user for his own purposes without gain. There was no distribution and the files were being played back at a private function for his own pleasure. Whatever Apple might think, if these file contain destructive malware, then they are in contravention of UK law (and international) and they are culpable and will pay.

has anyone else innocently fallen foul of this apparently unacceptable and illegal iTunes activity (such activity still subject to confirmation)?

The only state of permanence is change
#1

11 Replies Related Threads

    Cactus Music
    Max Output Level: 0 dBFS
    • Total Posts : 8424
    • Joined: 2004/02/09 21:34:04
    • Status: offline
    Re:iTunes mp3s plant malware and destructive content 2011/08/01 20:12:30 (permalink)
    why I avoid itunes and all things apple... It's like when they put copy protection on DAT tape machines that we were only recording original material with.
    What You could do is burn a CD of the mp3 files. Then drag and drop those files into Sonar directly from the CD. The Burn process would not copy any protection gimmicks.

    Johnny V  
    Cakelab  
    Focusrite 6i61st - Tascam us1641. 
    3 Desktops and 3 Laptops W7 and W10
     http://www.cactusmusic.ca/
     
     
    #2
    timidi
    Max Output Level: -21 dBFS
    • Total Posts : 5449
    • Joined: 2006/04/11 12:55:15
    • Location: SE Florida
    • Status: offline
    Re:iTunes mp3s plant malware and destructive content 2011/08/01 20:40:14 (permalink)
    I don't understand what you did. If you don't mind, could you spell out the steps in a sequential order without the wedding story?  What I just typed could come off as a little rude. I don't mean it to be.  

    ASUS P8P67, i7-2600K, CORSAIR 16GB, HIS 5450, 3 Samsung SSD 850, Win7 64, RME AIO.
     
    https://timbowman.bandcamp.com/releases
     
    #3
    bitflipper
    01100010 01101001 01110100 01100110 01101100 01101
    • Total Posts : 26036
    • Joined: 2006/09/17 11:23:23
    • Location: Everett, WA USA
    • Status: offline
    Re:iTunes mp3s plant malware and destructive content 2011/08/01 21:59:35 (permalink)
    It seems unlikely that an MP3 would even contain any executable code, much less be able to trick the O/S into running it. I, too, would like to know more.

    Wait a minute...iTunes files aren't even MP3's, are they?


    post edited by bitflipper - 2011/08/01 23:28:38


    All else is in doubt, so this is the truth I cling to. 

    My Stuff
    #4
    samson7842
    Max Output Level: -85 dBFS
    • Total Posts : 287
    • Joined: 2005/05/07 14:32:31
    • Status: offline
    Re:iTunes mp3s plant malware and destructive content 2011/08/02 01:31:10 (permalink)
    I thought iTunes files were AAC?

    Also, didn't Apple ditch copy protection?

    Me thinks there was more on that stick than he knows. Never put an un-scanned drive into your DAW or any other computer for that matter. Your buddy had something nasty on his drive. And I ain't talking about the music.

    Lateef Murdock
     
    Gear:
    Dell XPS 8700
    i7-4770 3.9 GHz
    24 GB Dual Channel DDR3 160MHZ 4DIMMs
    Windows 10 64bit
    Cakewalk (CxB)
    Sonar Platinum
    Studio One 4
    Komplete 9 Ultimate
    Maschine 2.7 MK3
    Edirol PCR 500
    Roland A-300 Pro 
    Steinberg Virtual Guitarist 2
    Virtual Guitarist Silk
    Virtual Guitarist Amber
    Virtual Guitarist Iron
    Steinberg UR22
    Waves Gold
    Melodyne 4 Studio
    Various other fiddly bits
    #5
    webbs hill studio
    Max Output Level: -76 dBFS
    • Total Posts : 742
    • Joined: 2006/02/01 02:04:12
    • Location: Buninyong,Australia
    • Status: offline
    Re:iTunes mp3s plant malware and destructive content 2011/08/02 03:49:32 (permalink)
    in all fairness to apple(go on flame me)i i download from their store using the lossless encoder,usually late at night and on the third glass of red, although you can buy 320 mp3`s-when doing a promo for a covers band i often download,convert to mp3, import to track 1 and use it as the guide track .

    "Me thinks there was more on that stick than he knows.Never put an un-scanned drive into your DAW or any other computer for that matter."

    wise words.
    Nothing goes near my daw without being scanned on the laptop with AVG 9.0 first.

    Solar Powered Sonar 2,5,7.2, 8.5.3 
    Stealth Audio by Vin Curigliano              
    Intel I7 2600 @3.8GHz ,P67A(rev3)8gb DDR3, 3x1tb WD , WIN 7 PRO 64 SP1,
    Mackie Onyx 1640F, Focusrite Sapphire 6,Sapphire Liquid 56 and Octopre MK11)ART S8,4x20'Viewsonic ,Alesis M1 MKII ,Richter Dragons MK4,Shure,Rodes,Sennheiser,AKG,Fender,Gibson,Peavy,Marshall,Ampeg,Roland,Bose,,Yamaha,Rogers,Pearl,Behringer,,,,,,,,                  
    #6
    Kalle Rantaaho
    Max Output Level: -5 dBFS
    • Total Posts : 7005
    • Joined: 2006/01/09 13:07:59
    • Location: Finland
    • Status: offline
    Re:iTunes mp3s plant malware and destructive content 2011/08/02 05:53:56 (permalink)
    I agree with the others. iTunes has got nothing to do with this. My daughter bought a memory card for his camera during a trip in Asia. She bought it in a big, respectable looking warehouse/store . There was a trojan virus  planted in the card. TGGhe package and everyhing was just like a normal Kingston.

    Addition: You can get the project files from the Seagate by copying them to another drive using the other PC. Then you can format the Seagate and continue using it, if a malware removal does not work.
    post edited by Kalle Rantaaho - 2011/08/02 05:59:11

    SONAR PE 8.5.3, Asus P5B, 2,4 Ghz Dual Core, 4 Gb RAM, GF 7300, EMU 1820, Bluetube Pre  -  Kontakt4, Ozone, Addictive Drums, PSP Mixpack2, Melda Creative Pack, Melodyne Plugin etc.
    The benefit of being a middle aged amateur is the low number of years of frustration ahead of you.
    #7
    tony_de2003
    Max Output Level: -88 dBFS
    • Total Posts : 144
    • Joined: 2007/01/28 16:42:06
    • Status: offline
    Re:iTunes mp3s plant malware and destructive content 2011/08/02 14:53:59 (permalink)
    First of all, thanks to everyone who replied. I'm really impressed and happy at the willingness to help and support.

    Sorry if I was not too clear on the 1st post, so here is clarification. I
    • the project was a simple 1 track continuous dance medly consisting of imported audio files edited at the joins.
    • all files were virus checked (Kaspersk Lab 2011) prior to use as was the stick. No threats found.
    • the files were 4 off mp3 files and 2 off MPEG4 audio format (I converted these to WAV as SONAR did not recognise the format).
    I'm not too savvy with iTunes, so I thought this was normal. If the original files were AAC, then they must have been converted. The owner is still adamant that the source was iTunes and the purchase was legal. The current status is that the external drive is still inaccessible to the DAW (reformat message pops up), but it performs normally on other PCs. I'm still having intermittent problems with the MOTU interface failing to be recognised, but re-initialising seems to repair that.

    The original files have been checked out by the local IT experts, and appear to be clean. If there are any nasties in them then they are not detected by normal commercial processes. However, I am still suspicious as the symptoms are typical of destructive DOS malware.

    iTunes seem to have the reputation for this destructive piracy protection in the past, but their Ts and Cs as of now, only state that they will "take robust measures against piracy"

    To sum up, I will never do this sort of favour again, and will only use files from a source known to me or purchased by me (hard lesson learned)!. I I will probably never get conclusive proof that it was iTunes, as all the evidence sees to be anecdotal.

    One intresting fact, is that AVG actually detected a Trojan in an iTunes file (generic dx!mfu). I dont know what the file format was, but it proves that the files can be infested. It was never proved to be originating from iTunes, but was never adequately explained either.

    Once again, thanks for the help and advice (I was already downloading the affected drive into another PC so I could reformat it, but thanks anyway). Once I've completed the swap, I hope that reformatting will get rid of the problem.

    Best regards
    Tony


    The only state of permanence is change
    #8
    tony_de2003
    Max Output Level: -88 dBFS
    • Total Posts : 144
    • Joined: 2007/01/28 16:42:06
    • Status: offline
    Re:iTunes mp3s plant malware and destructive content 2011/08/02 16:08:58 (permalink)
    Sorry, I forget to add, that after a big re-installing session I got things up and running again (other than the external drive).

    I re-created the project as a sort of working backwards investigation. This time it saved the file without a problem. I reloaded it, and got the message "corrupted audio. This will be replaced with silence". The project completed loading and where the sound clip peaks should have been there was a "replaced with silence notification". This would seem to be a classic piracy protection event. Further attempts to do anything with the file resulted in SONAR freezing.

    Cheers  



    The only state of permanence is change
    #9
    Rain
    Max Output Level: 0 dBFS
    • Total Posts : 9736
    • Joined: 2003/11/07 05:10:12
    • Location: Las Vegas
    • Status: offline
    Re:iTunes mp3s plant malware and destructive content 2011/08/02 17:08:49 (permalink)
    I buy albums on iTunes all the time, open the content in my DAW and save w/o any issue. I very much doubt that any company would go as far as damaging a person's goods to reinforce copyright as it would put them in a quite delicate situation.

    TCB - Tea, Cats, Books...
    #10
    bitflipper
    01100010 01101001 01110100 01100110 01101100 01101
    • Total Posts : 26036
    • Joined: 2006/09/17 11:23:23
    • Location: Everett, WA USA
    • Status: offline
    Re:iTunes mp3s plant malware and destructive content 2011/08/02 17:11:04 (permalink)
    The AVG hit was probably a false positive, which is not unusual. AVG is just looking for strings of values that match the signature of known viruses. In a data file that contains many millions of more-or-less random values, you're bound to occasionally you get a match but it's just coincidence.

    MP3s are data files, not executables, and though they could conceivably provide a transport mechanism for malware, they'd have no way to execute it.

    The "corrupted audio" message is misleading. All it means is that you have replaced the original audio with a new file. I see this all the time in my mastering projects, which reference external files that are independently updated.


    All else is in doubt, so this is the truth I cling to. 

    My Stuff
    #11
    Cactus Music
    Max Output Level: 0 dBFS
    • Total Posts : 8424
    • Joined: 2004/02/09 21:34:04
    • Status: offline
    Re:iTunes mp3s plant malware and destructive content 2011/08/02 19:35:11 (permalink)
    What Bitfliper say's about corrupted audio files is so true, I get that message if I screw up and copy a CWP to a back up drive and forget the audio folder.

    Re reading this story I think you have blamed the wrong thing for your problems. This seems like a case of something going haywire with the external drive while writing to it. A dozen scenarios could cause this. Faulty USB connection , MOBO, etc, Then Sonar lost the pathway and therefore  the message. You mentioning trouble with your interface, this too points to some USB or MOBO issues.
    A Virus isn't the only thing that makes a computer go off it's feed.



    Johnny V  
    Cakelab  
    Focusrite 6i61st - Tascam us1641. 
    3 Desktops and 3 Laptops W7 and W10
     http://www.cactusmusic.ca/
     
     
    #12
    Jump to:
    © 2024 APG vNext Commercial Version 5.1