Something altered my picture files's proprieties

system · 2014-05-20T17:07:31.000Z

I already used Google and I had already the hint it could have been some pictures-related program, but I didn’t find nothing on Picasa (I tested opening some jpg files with Picasa and their comments weren’t altered), so it must be something else.

CraigB · 2014-05-20T17:14:09.000Z

You never finished with the logs requested by Essexboy http://forum.avast.com/index.php?topic=150161.msg1091791 so maybe you are infected from downloading video files :-\

bob3160 · 2014-05-20T17:20:38.000Z

Where are the original pictures with the actual information you added ???

system · 2014-05-20T17:26:09.000Z

The original pictures are still in my PC and recovering the originals from a backup shouldn’t be too much a problem if wasn’t for a temporary “Server Error” google its giving me atm.

I haven’t download any video files in the last weeks that weren’t from my own uploaded video from YouTube
Anyway I don’t think its an actual malware, more like some “legit” software that doesn’t mind its own business.

bob3160 · 2014-05-20T17:41:38.000Z

Since you didn’t state the changes you made, it’s quite possible that the pictures you
transferred to Picasa simply transferred the standard information not your comments.

system · 2014-05-20T17:47:44.000Z

The pictures I am talking about never moved from my computer, to put it simply on the day 1 they had the comment “bla bla” on the day 2 they had the comment “CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90”, this out of the blue / nowhere. I have no idea which is Day 2 since I only randomly noticed the change so I can’t say when it happened but I my pictures were never moved since the last OS install.

bob3160 · 2014-05-20T17:51:17.000Z

Did you change the default program used to open or edit your pictures ???
Knowingly or unknowingly… If by default a different program now opens your pictures
the when you originally made your changes, that’s probably the program which was not able to
show your changes.

system · 2014-05-20T17:55:20.000Z

As I already said the only picture-related program I have installed (aside from Win7’s integrated photo viewer which is so pro that doesn’t even display animated GIFs), its Picasa.

bob3160 · 2014-05-20T17:59:22.000Z

What is the current default program that opens you pictures ???
What program was the default program that opened your pictures when you altered the information ???
If they are the same than I have no answerer for you. If they have changed, you have your answer.

system · 2014-05-20T18:21:29.000Z

Windows 7’s photo viewer
Never changed so far

Planning to install Irfan view to view pictures since as I said, apparently viewing animated GIFs files and not only the first frame its too much asking, especially since Win XP’s photo viewer could, but hey, Windows 7 = New “Features”

system · 2014-05-21T18:35:14.000Z

A little update:

I have discovered that even 2 years old backups have the same issue, so I am thinking that’s some sort of displaying issue rather than something actually and actively changing my file’s proprieties. With some extra Google search I’ve discovered that comments like
“LEAD Technologies Inc. V1.01” ← in comments
or
“CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90”
or
“File written by Adobe Photoshop¨ 5.1”

Are part of the file’s EXIF data, and that’s for some reason its being displayed in the comments field.
I have no idea what EXIF data is and how the heck it got there in the first place, I am just wondering if there’s a way to fix this somehow >:(

Edit:
I have tried some online tools that wipe EXIF data from files, too bad it doesn’t bring back my comments…

bob3160 · 2014-05-21T19:26:49.000Z

http://lmgtfy.com/?q=what+is+EXIF+data

system · 2014-05-21T19:32:22.000Z

Maybe my point wasn’t clear: I don’t care what frigging is EXIF data it could be anything I just couldn’t care less, I just want my frigging comments not to be overwritten by this trash ← this is what EXIF data is.

bob3160 · 2014-05-21T19:37:51.000Z

berserker3600 post:16:

Maybe my point wasn’t clear: I don’t care what frigging is EXIF data it could be anything I just couldn’t care less, I just want my frigging comments not to be overwritten by this trash ← this is what EXIF data is.

So why did you ask the question ???
If you don’t want the information, then get rid of it:

http://www.screencast-o-matic.com/screenshots/u/Lh/1400700956447-48309.png

click on RemoveProperties and Personal Information.
I personally want the information and it’s come in handy at times.

system · 2014-05-21T19:51:40.000Z

That’s just wipe away everything.

I want my comments I added on those pictures!

But I can’t recover em, even if I take pictures from 2 years old backups which I am 100% sure they had their comments set as they should, they still showing that EXIF whatever data on the comments field!
So obviously it could be 2 things:

[A]
Something actively altering my files as soon as I download / unpack em from a backup
[B]
Some windows / program setting its set to show EXIF data in the comments field regardless of the content.

Either if its A or B I can’t even recover my data from my backups like this.

“Delete everything” how this is supposed to help?

bob3160 · 2014-05-21T19:55:40.000Z

You asked for help, I offered you suggestions.
Apparently not what you’re looking for.

At this point, you can start doing some constructive searches for an answer or,
wait for someone else to respond.

Eddy · 2014-05-21T19:57:17.000Z

Let me guess. The pictures are taken with a digital camera.

system · 2014-05-21T19:59:31.000Z

Some yes, some were made with Photoshop apparently.

This for example had its comments changed to
CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90
And obviously its not a photo.

https://lh5.googleusercontent.com/SBW-W_0HMkMMSzL_ggeijzapN1DOV2_vGO5MIKt0ecgH=w1600-h1200-no

Could someone make a quick check? download the image and check what’s in its comments.

Eddy · 2014-05-21T20:30:32.000Z

I just tested it and had no problem changing the comment, and it didn’t reverse.
Download and install IrfanView.
Make sure the file associations are set to edit with IrfanView.
Open the image, change the comment, close the image.
Open it again and see if the comment is still as you have set it.

system · 2014-05-21T20:44:58.000Z

Well the problem its not if I can change my file’s comment, I had already tested it on an image a couple of days ago and its still there with my comment not changed.
The problem is changing over 2000(and its an optimistic estimate) file’s proprieties back to their original comment (which in most case isn’t possible since the original info its gone, gone forever), but what makes me really wonder if what’s changing or altering the view of my file’s proprieties, since as I said I have recovered some image libraries from over 2 years ago’s backup and some of their comments was altered.

Announcements