View original (French)

Unstoppable downloading of a jpg file

Solved
tokaido -  
 la vrille -
Good evening everyone,
I have a file problem that downloads automatically (header.jpg)
from the same IP and interrupts my work by opening Microsoft Photo Editor.
I have tried to uninstall Microsoft Photo Editor, but it continues.
Can you help me stop this?
Thank you. 
Configuration: win 98 se

14 answers

  1.
    JP1966 Posted messages 296 Registration date   Status Member Last intervention   48
     
    Good evening

    Two pieces of advice:

    - a check-up against spyware with "Spybot, Search & Destroy"

    - an antivirus check-up, for example, a free one:

    http://www.secuser.com/antivirus/index.htm

    Happy hunting

    JP
    0
  2. tokaido
     
    Thank you JP 1966
    I just used Spybot and I had previously used Avast, unfortunately without success.
    I should specify that my problem only occurs when using the internet.
    Since the message mentions the sender's IP address, I might be able to block messages coming from that IP? What do you think, and if so, how should I go about it?
    Thank you.
    0
    1. JP1966 Posted messages 296 Registration date   Status Member Last intervention   48
       
      Good evening Tokaido,

      Sorry for my silence, but I had disabled email notifications

      Here are the results of my research on "header":

      Macromedia Flash vulnerabilities
      all versions (08/08/02)

      Two vulnerabilities have been discovered in the Macromedia Flash player. They affect all versions of the software: for Unix and Windows, for Internet Explorer and Netscape.

      The first vulnerability is a buffer overflow that allows a malicious person to execute arbitrary code on the victim's computer when viewing a rigged animation, either on a webpage or in an HTML email. The .SWF file must have been manually edited; animations created with Macromedia tools cannot be harmful. For more information, read bulletin MPSB02-09 (Macromedia Flash Malformed Header Vulnerability Issue).

      The second vulnerability allows a malicious website administrator to read files on the victim's computer while viewing a rigged animation, despite the security rules that normally govern the player. For more information, read bulletin MPSB02-10 (Macromedia Flash URL Modification Issue).

      According to the publisher, 90% of users have the Flash plug-in, often unknowingly. Thus, almost all internet users are urged to download the new version 6.0.47.0 of the player as soon as possible.

      The Macromedia site to update the Flash player

      It is related to Macromedia Flash; the Secuser site advises uninstalling the current version to download the most recent one. At worst, this advice also applies to Internet Explorer, since you encounter this problem when opening the internet

      Best regards

      JP
      0
  3. tokaido
     
    Good evening JP1966,
    I downloaded the latest version of Macromedia Flash 7.19 unsuccessfully.
    What should I do?
    Thank you in advance for any suggestions.
    0
  4. JP1966 Posted messages 296 Registration date   Status Member Last intervention   48
     
    Good evening Tokaido

    I would therefore recommend the second solution, to reinstall the internet using the original CD

    Otherwise, instead of trying to uninstall Photo Editor, haven’t you tried deleting “header.jpg” by starting the PC in safe mode?

    To be continued

    JP
    0
    1. tokaido
       
      Good evening JP1966,
      it's not possible to delete header.jpg (I just tried again in safe mode) because there is no file "header.jpg" and the repeated attempt to open this file in Microsoft Photo Editor is exactly the problem.

      not easy...
      0
  6. Nunuxnewby
     
    Hi!
    What’s your firewall, Tokaido?
    0
    1. tokaido
       
      hi
      my firewall: zone alarm
      0
  7. cyril
     
    I just ran the soft security task manager (evaluation version)
    it displayed a process that was hidden, stealthy, and invisible from the task manager (about 17 MB) with a rather bizarre name (like zhae.exe) and I don't know where it comes from
    I deleted this file after stopping it with the security task manager

    Since then, the annoying header.jpg problem has disappeared

    I hope this answers your question
    0
    1. tokaido
       
      Good evening Cyril,
      I am on Win 98 SE. I tried task manager,

      no positive response.
      Thank you anyway.
      0
  8. tokaido
     
    Good evening everyone.
    I always have the same issue with the unexpected downloading of header.jpg.
    Does anyone else have the same situation?

    Do you have any idea how to fix it?
    Thank you in advance.
    0
  9. cyril
     
    look in the system or system32 directory

    make sure that the file names present in there are for the .exe executable files recognized by windows
    if you happen to notice one with a strange name, delete it
    0
  10. jybou
     
    Hello everyone,

    I have the same problem as you (header.jpg file trying
    to download every 3 minutes).
    I just became aware of your messages.
    I will try to do what Cyril says.
    This site seems very good to me.

    Additionally, I opened the same issue on assiste.com

    To be transparent, I'm not trying to divert users from this site, which is really very good, but rather
    to join forces on this problem.

    Could you please
    either email me your hardware and software configuration
    on your machine to see if there are similarities?

    or
    connect to the topic
    on assiste.com
    click on the community on the left
    go to security (contamination-decontamination)
    click on the header.jpg topic

    either read everything we have tried
    or go to the last page, reply,
    and specify your configuration.
    If you have managed to completely get rid of it,
    please let us know how.

    We managed to block it at the firewall level,
    but we haven't solved the problem for now.

    I will try what Cyril did.
    I will put a link to this site on our forum so that participants can also check it out

    and I am waiting to know your respective configurations.
    @+
    JYBOU
    0
  11. Terdef Posted messages 1034 Status Security Contributor 133
     
    Hello everyone
    It's been a long time...

    Hello jybou, you're here too ;o)

    See this discussion thread, jybou's thread, about header.jpg
    http://assiste.forum.free.fr/viewtopic.php?t=6754

    Give information about your system, your modem/router, your ISP, your utilities, etc. ... so that we can try to find a common point.

    Best regards

    --
    Pierre (aka Terdef)
    0
  12. BINOU
     
    I had exactly the same issue with the incessant downloading of header.jpg.
    After extensive searching, you need to download the trial version of Security Task Manager, which is the only antispyware that solved the problem for me. A process with a strange name like iu.. something was running. After quarantining it (do not end the process, as it will just restart on boot), everything was fixed.
    0
    1. tokaido
       
      thank you biniou,
      I downloaded the eval version of securitytask manager.
      can you guide me because I didn't find any "iu..".
      what steps did you take?
      thank you in advance
      tokaido
      0
  13. wayreth Posted messages 2154 Status Contributor 1 010
     
    Have you checked the programs that start with Windows via msconfig? You can uncheck all the programs except for the antivirus and firewall. The rest is useless and eats up RAM.

    Also try Ad-Aware (complementary to Spybot).

    Check the access of programs in your firewall. If you're not sure, you can remove it from the list, so the next time the program wants to go online, it will ask you for permission, and you can deny it.
    0
  14. wayreth Posted messages 2154 Status Contributor 1 010
     
    Maybe you should respond to the proposals that are made to you...
    0
    1. tokaido Posted messages 1 Status Member
       
      Thank you for this post
      actually I didn't fully understand the message.
      I want to avoid making mistakes.
      Can you guide me?
      Thank you in advance
      0
  15. la vrille
     
    Hello everyone

    None of you (pb header.jpg) specified your version of Internet Explorer!
    If you are on Win 98 SE, you may need to download IE 6 SP1 from the Microsoft website, which is more secure - but you will still need to retrieve some updates from Windows Update.
    Moreover, particularly at Tokaido's address, you should be able to block access to your PC with ZoneAlarm: in the program control panel, you have the list of programs that have accessed it, and you can block them by clicking on the checkmarks:
    You have 3 options; allow V, block X, ask?
    By default, if you have allowed a program to access, it will be checked in ask mode?
    In general, you should avoid granting server rights to software or processes you do not know and/or are not sure about.
    I don't know if this can help you; it's just a small contribution, but I wish you good luck and don't forget that there are highly competent people here in this forum, and their advice is always productive...
    To whom it may concern, goodbye!
    0