|
30 August 2018, 16:38
|
#1 |
|
Registered User
Join Date: Aug 2014
Location: Gdynia/Poland
Posts: 162
|
JFIF (JPEG) picture datatype 44.9
Hi ! I got virus warning (HappyNewYear96) from VirusCheckerII in the newest jpeg/jfif datatype by Henryk Richter from 2018-08-22.
Anyone else have this issue ? Is this a false alarm ? cheers |
|
|
30 August 2018, 18:05
|
#2 |
|
Registered User
Join Date: Dec 2007
Location: Szczecin/Poland
Posts: 424
|
http://www.vht-dk.dk/amiga/desc/txt/hny-9697.htm
File contains "Happy New Year 96" string (no underscores, but I can't imagine why anyone would like to put it there). Also contains the 65 77 20 59 hex sequence, at offset 0x12B92. Did you contact the author or Aminet administrators? [edit] It seems version for 68000 does NOT contain the string. IMHO 99.9% the archive is infected. |
|
|
|
30 August 2018, 18:08
|
#3 |
|
Registered User
Join Date: Apr 2005
Location: digital hell, Germany, after 1984, but worse
Posts: 3,365
|
Confirmed, found by Virus Executor, but no other of my 46500 files was infected.
The string "Happy New Year 96 !" really exists and the jfif.datatype is always executed on my OS3.9 system to load my wallpaper. I've replaced the datatype with the last beta version again, which has no such signature and is not detected by Virus Executor. Maybe just nothing happens anymore because the year 96 is in the past now ?? Going to report this at the authors thread at A1k.org now ... |
|
|
|
30 August 2018, 21:51
|
#4 |
|
Registered User
Join Date: Aug 2014
Location: Gdynia/Poland
Posts: 162
|
I told Henrik (uploader) about this and he confirmed this. He will reupload it to aminet when he clean up his system.
|
|
|
|
30 August 2018, 21:55
|
#5 |
|
Registered User
Join Date: Aug 2014
Location: Gdynia/Poland
Posts: 162
|
Could someone contact aminet administrator to remove this file and people from Apollo team forum about this issue ? Everyone should be warned.
|
|
|
|
30 August 2018, 22:05
|
#6 |
|
Registered User
Join Date: Apr 2005
Location: digital hell, Germany, after 1984, but worse
Posts: 3,365
|
The author of jfif.datatype knows already about this virus infection and said that he wants to inform Christoph Gutjahr from Aminet.
|
|
|
|
30 August 2018, 23:46
|
#7 |
|
Banned
Join Date: Nov 2007
Location: Trondheim, Norway
Posts: 1,893
|
How on earth could this happen?
|
|
|
|
30 August 2018, 23:55
|
#8 |
|
Registered User
Join Date: Apr 2005
Location: digital hell, Germany, after 1984, but worse
Posts: 3,365
|
He has tested his jfif.datatype together with an old infected picture.datatype from his ancient software collection "Kramkiste".
|
|
|
|
01 September 2018, 12:38
|
#9 |
|
Moderator
Join Date: Jun 2009
Location: France
Age: 46
Posts: 1,982
|
Fixed archive online :
http://aminet.net/package/util/dtype/JFIFdt44 |
|
|
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| which picture.datatype? | Bamiga2002 | support.Apps | 29 | 25 October 2018 04:41 |
| A picture.datatype with alphachannel support is required. | AGS | Coders. System | 5 | 26 August 2014 18:31 |
| How to overcome this OS 3.9 picture.datatype issue? | Leandro Jardim | request.Apps | 4 | 14 August 2014 01:27 |
| picture.datatype v45 | amiga_user | request.Other | 1 | 28 November 2011 15:50 |
| HTML datatype? | NovaCoder | support.Apps | 7 | 05 July 2010 12:59 |
|
|
