AVAST and JPG files (AVAST scan allways jpg file, same if disable)

AVAST5 scan all JPG files; if disable AVAST; AVAST scan allways JPG files!!!
very big problem, can’t disable this scan! if exclude folder, not work… problem sended to french AVAST support but

I use SyncToy to make backup (sync with echo) of all jpg files!!
With AVAST (not another AV) after 1 hours, not finish, and use more CPU! (same with Avast disabled, in monitor, can see all files scanned, and counter file scanned increase!!)

With Microsoft Essential (after uninstall AVAST,reboot, install MSE,reboot), less than 5 minutes!

(I use only one AV)

Please stay on the topic you started before…!! Thanks…!!!
asyn

Edited…

Okay,dont let avast to scan .Jpg files by doing :
1.install English language"so i can guide you":from the help file learn how to install it
2.click on real time shields tab then chhose file system shield after that click on Expert Settings->Exclusions after that click add then write in the text box"*.jpg" without quotes then un-tick the third box as shown in picture after all click ok.

@ baudav
Since no one has asked the question - Why don’t you want avast to scan .jpg files ?

avast’s resident scanners rightly scan files that are at risk of infection and .jpg files can be infected to run malicious code. So you are leaving yourself open to possible infection by excluding all .jpg files.

Other AVs ‘should’ also be scanning .jpg files or they would fail certain security tests as .jpg files can be infected/exploited. Remember these exclusions aren’t just for the SyncToy backup but for all .jpg files so you have to exercise extreme care when excluding file groups like this.

From your initial image, it is showing one particular file in the recycle bin are they all in the recycle bin or a lot of them in the recycle bin ?

If so, before you run your SyncToy to make backup you should clear your recycle bin and temp folders, etc. that would certainly reduce the overhead.

I don’t know anything about SyncToy, does it backup the files to a folder in another partition ?
If so then my suggestion would be to exclude that folder ?:\SyncToy_backup_folder_path* the ‘?’ is the drive/partition or can be used as a single wildcard if you have that folder in more than one location.

Big problem are:

  1. I disable AVAST resident module; and AVAST allways scan jpg file !!
    Disable= AVAST must be OFF= no scan

  2. I excluse reclyced folder; and avast allways scan jpg files in this recycler.

I use syncToy to synchronise two folder. First on my system, and second in external disk.
This folder contain more than 1000 jpg files!!! It’s why I disable AVAST, but AVAST is displayed ‘stopped’ and below I can see all jpg file scanned by AVAST!

  1. If AVAST scan JPG file by default, it must scan mp3,gif,dat,bin,pdf…and all files, all can contain virus,trojan… not logical! JPG is not executable file and if you use correct software up to date, system up to date, no problem with JPG files.
    AVAST not scan compressed EXE files make by WINRAR; I must clic and launch analyze to scan (more important than JPG files ? no ?)

DavidR, how on Earth can a .jpg file be infected?
Please explain me as a technical specialist to a technical specialist, taking into account that .jpg files are not executable and don’t contain any parts which are executable (unlike e. g. an MS Word file containing some macros).
Theoretically, you can put executable code to any kind of file, but it’ll cause no harm if you don’t execute it. And nobody executes .jpg, .txt or .avi files, do they?

So you haven’t seen any alerts on line with exploited jpg files then. I’m no technical virus analysis and I don’t know how they go about it. But why do you think .jpg files are on the default list for being scanned by avast if they don’t present a risk.

If they can’t be infected, why does the web shield scan .jpg images before they would be displayed, there are numerous instances of avast’s web shield alerting on .jpg files.

Why would you fail an AV Test if you don’t scan .jpg files by default.

You are executing a .jpg simply by opening it to display the content image.
http://www.google.com/search?q=jpg+exploit

There is plenty of information out there all you have to do is look.

DavidR, how on Earth can a .jpg file be infected? Please explain me as a technical specialist to a technical specialist, taking into account that .jpg files are not executable and don't contain any parts which are executable (unlike e. g. an MS Word file containing some macros). Theoretically, you can put executable code to any kind of file, but it'll cause no harm if you don't execute it. And nobody executes .jpg, .txt or .avi files, do they?

quote:
6. Can JPG, GIF, and other image files be infected?

Yes. Some software programs have vulnerabilities that contaminate JPG image files with malicious code. Contaminated JPG files can carry or launch a virus, worm, or Trojan on unpatched systems. http://www.mcafee.com/us/threat_center/outbreaks/faqs.html#6

Perrun virus
http://antivirus.about.com/od/virusdescriptions/a/perrun.htm

The link to Google search you gave leads to many different pages discussing the same vulnerability in MS code found in September 2004 and fixed in October 2004. Yes, you are right that theoretically any data can be run.
But now it’s 2010, and if anyone uses an OS or application programs from 2004 (that’s SIX YEARS ago) without security updates, they don’t need an antivirus, they need somebody explaining very basics of computer security.

P. S. While I was writing this post, Pondus sent his posting. Pondus, your links lead to the very same vulnerability discovered and fixed in 2004 ( http://www.microsoft.com/technet/security/Bulletin/ms04-028.mspx )
You have just proved to some extent that such vulnerabilities have not existed since November 2004.

Here is something from 2006

Infected .JPG Image of a Green Frog http://www.precisesecurity.com/blogs/2006/06/27/infected-jpg-image-of-a-green-frog/
http://www.symantec.com/security_response/writeup.jsp?docid=2006-042013-1813-99

Your link clearly says that it’s Trojan.Galapoper.A that downloads some .jpg files, extracts and executes some code from them. That is your computer has to be already infected with Trojan.Galapoper.A to do that.

And my problem, with AVAST disabled and allways scan JPG files !?

all files can contain virus,trojan… while avast not scan mp3?

Probleme is: AVAST is disabled: folder is exclude!! and AVAST allways scan JPG files !!