Author Topic: AVAST and JPG files (AVAST scan allways jpg file, same if disable)  (Read 8711 times)

0 Members and 1 Guest are viewing this topic.

baudav

  • Guest
AVAST5 scan all JPG files; if disable AVAST; AVAST scan allways JPG files!!!
very big problem, can't disable this scan! if exclude folder, not work... problem sended to french AVAST support but

I use SyncToy to make backup (sync with echo) of all jpg files!!
With AVAST (not another AV) after 1 hours, not finish, and use more CPU! (same with Avast disabled, in monitor, can see all files scanned, and counter file scanned increase!!)

With Microsoft Essential (after uninstall AVAST,reboot, install MSE,reboot), less than 5 minutes!

(I use only one AV)

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: AVAST and JPG files (AVAST scan allways jpg file, same if disable)
« Reply #1 on: August 17, 2010, 10:02:38 AM »
Please stay on the topic you started before..!! Thanks..!!!
asyn

Edited...
« Last Edit: August 17, 2010, 10:11:06 AM by Asyn »
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline superhacker

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 979
  • superhacker != super mario
Re: AVAST and JPG files (AVAST scan allways jpg file, same if disable)
« Reply #2 on: August 17, 2010, 05:09:54 PM »
Okay,dont let avast to scan .Jpg files by doing :
1.install English language"so i can guide you":from the help file learn how to install it
2.click on real time shields tab then chhose file system shield after that click on Expert Settings->Exclusions after that click add then write in the text box"*.jpg" without quotes then un-tick the third box as shown in picture after all click ok.
Dreams don't die, they just fall asleep.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: AVAST and JPG files (AVAST scan allways jpg file, same if disable)
« Reply #3 on: August 17, 2010, 05:42:09 PM »
@ baudav
Since no one has asked the question - Why don't you want avast to scan .jpg files ?

avast's resident scanners rightly scan files that are at risk of infection and .jpg files can be infected to run malicious code. So you are leaving yourself open to possible infection by excluding all .jpg files.

Other AVs 'should' also be scanning .jpg files or they would fail certain security tests as .jpg files can be infected/exploited. Remember these exclusions aren't just for the SyncToy backup but for all .jpg files so you have to exercise extreme care when excluding file groups like this.

From your initial image, it is showing one particular file in the recycle bin are they all in the recycle bin or a lot of them in the recycle bin ?

If so, before you run your SyncToy to make backup you should clear your recycle bin and temp folders, etc. that would certainly reduce the overhead.

I don't know anything about SyncToy, does it backup the files to a folder in another partition ?
If so then my suggestion would be to exclude that folder ?:\SyncToy_backup_folder_path\* the '?' is the drive/partition or can be used as a single wildcard if you have that folder in more than one location.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

baudav

  • Guest
Re: AVAST and JPG files (AVAST scan allways jpg file, same if disable)
« Reply #4 on: August 18, 2010, 03:54:39 PM »
Big problem are:
1)  I disable AVAST resident module; and AVAST allways scan jpg file !!
Disable= AVAST must be OFF= no scan

2) I excluse reclyced folder; and avast allways scan jpg files in this recycler.


I use syncToy to synchronise two folder. First on my system, and second in external disk.
This folder contain more than 1000 jpg files!!! It's why I disable AVAST, but AVAST is displayed 'stopped' and below I can see all jpg file scanned by AVAST!

3) If AVAST scan JPG file by default, it must scan mp3,gif,dat,bin,pdf....and all files, all can contain virus,trojan... not logical! JPG is not executable file and if you use correct software up to date, system up to date, no problem with JPG files.
AVAST not scan compressed EXE files make by WINRAR; I must clic and launch analyze to scan (more important than JPG files ? no ?)

Anton Bourbon

  • Guest
Re: AVAST and JPG files (AVAST scan allways jpg file, same if disable)
« Reply #5 on: August 22, 2010, 02:50:48 PM »
Why don't you want avast to scan .jpg files ?

[skip]
.jpg files can be infected to run malicious code.
DavidR, how on Earth can a .jpg file be infected?
Please explain me as a technical specialist to a technical specialist, taking into account that .jpg files are not executable and don't contain any parts which are executable (unlike e. g. an MS Word file containing some macros).
Theoretically, you can put executable code to any kind of file, but it'll cause no harm if you don't execute it. And nobody executes .jpg, .txt or .avi files, do they?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: AVAST and JPG files (AVAST scan allways jpg file, same if disable)
« Reply #6 on: August 22, 2010, 03:07:17 PM »
So you haven't seen any alerts on line with exploited jpg files then. I'm no technical virus analysis and I don't know how they go about it. But why do you think .jpg files are on the default list for being scanned by avast if they don't present a risk.

If they can't be infected, why does the web shield scan .jpg images before they would be displayed, there are numerous instances of avast's web shield alerting on .jpg files.

Why would you fail an AV Test if you don't scan .jpg files by default.

You are executing a .jpg simply by opening it to display the content image.
http://www.google.com/search?q=jpg+exploit


There is plenty of information out there all you have to do is look.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: AVAST and JPG files (AVAST scan allways jpg file, same if disable)
« Reply #7 on: August 22, 2010, 03:32:19 PM »
Quote
DavidR, how on Earth can a .jpg file be infected?
Please explain me as a technical specialist to a technical specialist, taking into account that .jpg files are not executable and don't contain any parts which are executable (unlike e. g. an MS Word file containing some macros).
Theoretically, you can put executable code to any kind of file, but it'll cause no harm if you don't execute it. And nobody executes .jpg, .txt or .avi files, do they?

quote:
6. Can JPG, GIF, and other image files be infected?

Yes. Some software programs have vulnerabilities that contaminate JPG image files with malicious code. Contaminated JPG files can carry or launch a virus, worm, or Trojan on unpatched systems. http://www.mcafee.com/us/threat_center/outbreaks/faqs.html#6

Perrun virus
http://antivirus.about.com/od/virusdescriptions/a/perrun.htm
« Last Edit: August 22, 2010, 03:35:29 PM by Pondus »

Anton Bourbon

  • Guest
Re: AVAST and JPG files (AVAST scan allways jpg file, same if disable)
« Reply #8 on: August 22, 2010, 03:40:15 PM »
The link to Google search you gave leads to many different pages discussing the same vulnerability in MS code found in September 2004 and fixed in October 2004. Yes, you are right that theoretically any data can be run.
But now it's 2010, and if anyone uses an OS or application programs from 2004 (that's SIX YEARS ago) without security updates, they don't need an antivirus, they need somebody explaining very basics of computer security.

P. S. While I was writing this post, Pondus sent his posting. Pondus, your links lead to the very same vulnerability discovered and fixed in 2004 ( http://www.microsoft.com/technet/security/Bulletin/ms04-028.mspx )
You have just proved to some extent that such vulnerabilities have not existed since November 2004.
« Last Edit: August 22, 2010, 03:51:31 PM by Anton Bourbon »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user

Anton Bourbon

  • Guest
Re: AVAST and JPG files (AVAST scan allways jpg file, same if disable)
« Reply #10 on: August 22, 2010, 04:07:07 PM »
Your link clearly says that it's Trojan.Galapoper.A that downloads some .jpg files, extracts and executes some code from them. That is your computer has to be already infected with Trojan.Galapoper.A to do that.

baudav

  • Guest
Re: AVAST and JPG files (AVAST scan allways jpg file, same if disable)
« Reply #11 on: August 23, 2010, 05:32:33 AM »
And my problem, with AVAST disabled and allways scan JPG files !?

all files can contain virus,trojan.. while avast not scan mp3?

Probleme is: AVAST is disabled: folder is exclude!! and AVAST allways scan JPG files !!