English Amiga Board


Go Back   English Amiga Board > Support > support.Apps

 
 
Thread Tools
Old 30 August 2018, 16:38   #1
HanSolo
Registered User

 
Join Date: Aug 2014
Location: Gdynia/Poland
Posts: 160
JFIF (JPEG) picture datatype 44.9

Hi ! I got virus warning (HappyNewYear96) from VirusCheckerII in the newest jpeg/jfif datatype by Henryk Richter from 2018-08-22.

Anyone else have this issue ? Is this a false alarm ?

cheers
HanSolo is offline  
Old 30 August 2018, 18:05   #2
Romanujan
Registered User
 
Join Date: Dec 2007
Location: Szczecin/Poland
Posts: 261
http://www.vht-dk.dk/amiga/desc/txt/hny-9697.htm

File contains "Happy New Year 96" string (no underscores, but I can't imagine why anyone would like to put it there). Also contains the 65 77 20 59 hex sequence, at offset 0x12B92. Did you contact the author or Aminet administrators?

[edit] It seems version for 68000 does NOT contain the string. IMHO 99.9% the archive is infected.
Romanujan is offline  
Old 30 August 2018, 18:08   #3
PeterK
Registered User
 
Join Date: Apr 2005
Location: Hangover
Posts: 2,319
Confirmed, found by Virus Executor, but no other of my 46500 files was infected.

The string "Happy New Year 96 !" really exists and the jfif.datatype is always executed on my OS3.9 system to load my wallpaper. I've replaced the datatype with the last beta version again, which has no such signature and is not detected by Virus Executor.

Maybe just nothing happens anymore because the year 96 is in the past now ??

Going to report this at the authors thread at A1k.org now ...
Attached Thumbnails
Click image for larger version

Name:	JFIF44.9_HappyNewYear96.png
Views:	59
Size:	13.5 KB
ID:	59598  
PeterK is offline  
Old 30 August 2018, 21:51   #4
HanSolo
Registered User

 
Join Date: Aug 2014
Location: Gdynia/Poland
Posts: 160
I told Henrik (uploader) about this and he confirmed this. He will reupload it to aminet when he clean up his system.
HanSolo is offline  
Old 30 August 2018, 21:55   #5
HanSolo
Registered User

 
Join Date: Aug 2014
Location: Gdynia/Poland
Posts: 160
Could someone contact aminet administrator to remove this file and people from Apollo team forum about this issue ? Everyone should be warned.
HanSolo is offline  
Old 30 August 2018, 22:05   #6
PeterK
Registered User
 
Join Date: Apr 2005
Location: Hangover
Posts: 2,319
The author of jfif.datatype knows already about this virus infection and said that he wants to inform Christoph Gutjahr from Aminet.
PeterK is offline  
Old 30 August 2018, 23:46   #7
kolla
Registered User
kolla's Avatar
 
Join Date: Nov 2007
Location: Trondheim, Norway
Posts: 1,447
How on earth could this happen?
kolla is offline  
Old 30 August 2018, 23:55   #8
PeterK
Registered User
 
Join Date: Apr 2005
Location: Hangover
Posts: 2,319
He has tested his jfif.datatype together with an old infected picture.datatype from his ancient software collection "Kramkiste".
PeterK is offline  
Old 01 September 2018, 12:38   #9
Crashdisk
Moderator

Crashdisk's Avatar
 
Join Date: Jun 2009
Location: France
Age: 41
Posts: 1,261
Fixed archive online :
http://aminet.net/package/util/dtype/JFIFdt44
Crashdisk is offline  
 


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Similar Threads
Thread Thread Starter Forum Replies Last Post
A picture.datatype with alphachannel support is required. AGS Coders. System 5 26 August 2014 18:31
How to overcome this OS 3.9 picture.datatype issue? Leandro Jardim request.Apps 4 14 August 2014 01:27
which picture.datatype? Bamiga2002 support.Apps 28 17 June 2012 05:54
picture.datatype v45 amiga_user request.Other 1 28 November 2011 15:50
HTML datatype? NovaCoder support.Apps 7 05 July 2010 12:59

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 03:04.


Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2018, vBulletin Solutions Inc.
Page generated in 0.06582 seconds with 14 queries