I've just digitized a couple of LPs and needed some cover art. My scanner isn't big enough to scan the album so I searched for and downloaded the images off the net.
When I did so Avast reported that one of them contained the "Win32:Hupigon-ONX" trojan and immediately quarantined it. Not wishing to take any chances I downloaded a different copy which reported as clean.
Now was this just a false positive from Avast or could there really have been a trojan in the jpg?
If there was how would it get executed?
I must admit that this aspect of trojans and viruses has always baffled me. As a software developer I've always checked length of arrays etc. so I don't see why things like buffer overruns should occur. I understand that people do cut corners and make mistakes and if the software is complex enough these errors can slip through.