Ok, maybe it's just me but something seems funky. Given that 99% of the jpg's will go through no problem and the other 1% will be caught, that means the 1% are unique in some way, shape or form. They are detectable which declude virus does and other virus packages do if you scan all files.
In being unique, it was created or saved differently then other jpg's. What seems funky is that an update to the creation software/process should put it within the 99% group. The GDI+ tools, virus detection tools are trying to catch at the reciever/viewer which is good, but it's the creation tools that need updating. What I'm trying to figure here is how to tell users to fix the problems and minimize false positives since we use so many different graphics formats in our business. If they upgrade their software to the highest sp/rev, they have the needed patchs from MS, can they open the graphic without being hit and re-save it in a jpg format that will be safe? Did that make any sense? ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, September 30, 2004 5:51 AM Subject: Re: [Declude.Virus] JPEG Vulnerability > > >Ok....... > >Declude virus does the detection. > > Correct. An AV program, can, as well if it wants to. Or it can just wait > until a virus comes out using this exploit. So you may be protected with > or without Declude Virus detecting the vulnerability, and you may or may > not have false positives with or without Declude Virus detecting the > vulnerability. > > >If a jpeg is attached/embedded in the email, the email will be flagged as > >having the vulnerability whether it's actually infected or not. > > > >Correct? > > No. 99% of JPEGs will get through without a problem. It's that other 1% > that Microsoft forgot about. > > >If the sending pc, it's dll's, and software are updated with Microsoft's > >patch will the embedded jpg still be flagged as vulnerable? > > Yes. The updates for a computer only affect how it displays JPEG files, > not how it creates them. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers > since 2000. > Declude Virus: Ultra reliable virus detection and the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > > *Scanned for viruses by Declude Virus* > > *Scanned for viruses by Declude Virus* --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
