PC Review


Reply
Thread Tools Rate Thread

[NOD32] I get Java/ClassLoader.B trojan ..&.. Java/Exploit.Bytverify trojan

 
 
PWalker
Guest
Posts: n/a
 
      13th Jun 2005
Hi, I rann NOD32 recently and got the following as being tojans:

C:\Documents and Settings\user\Application
Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-3b328bed-47903523.class
- Java/ClassLoader.B trojan

C:\Documents and Settings\user\Application
Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-5d1b4c65-77d1dc48.class
- Java/ClassLoader.B trojan

C:\Documents and Settings\user\Application
Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-281e147b-26c755fc.class
- Java/Exploit.Bytverify trojan

.... but are they really? Can I delete them? They are present in my 'cache'
which i am guessing is stuff i can delete i.e. similar to a 'Temp' folder?

Any advice on what i should do?

Many thanks,

peter


 
Reply With Quote
 
 
 
 
Jari Lehtonen
Guest
Posts: n/a
 
      13th Jun 2005
On Mon, 13 Jun 2005 15:30:30 +1000, "PWalker" <(E-Mail Removed)>
wrote:

>Any advice on what i should do?
>

You can:
a) submit the files to Eset for analysis. Here is how:
"To submit a suspicious file to Eset for analysis, please carry on as
follows:

* compress the file(s) into a zip or rar archive, protect it with the
password "infected"
* attach the archive to an email message
* send the message with the attachment to (E-Mail Removed) "
b) get a second opinion by testing the files with online scanners like
http://virusscan.jotti.org/ and
http://www.virustotal.com/flash/index_en.html

Jari
 
Reply With Quote
 
 
 
 
David H. Lipman
Guest
Posts: n/a
 
      13th Jun 2005
From: "PWalker" <(E-Mail Removed)>

| Hi, I rann NOD32 recently and got the following as being tojans:
|
| C:\Documents and Settings\user\Application
| Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-3b328bed-47903523.class
| - Java/ClassLoader.B trojan
|
| C:\Documents and Settings\user\Application
| Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-5d1b4c65-77d1dc48.class
| - Java/ClassLoader.B trojan
|
| C:\Documents and Settings\user\Application
| Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-281e147b-26c755fc.class
| - Java/Exploit.Bytverify trojan
|
| ... but are they really? Can I delete them? They are present in my 'cache'
| which i am guessing is stuff i can delete i.e. similar to a 'Temp' folder?
|
| Any advice on what i should do?
|
| Many thanks,
|
| peter
|

They are real and quite common...

Dump the contents of your IE cache -
Start --> settings --> control panel --> Internet options --> delete files

Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
Tools --> Options --> Privacy --> Cache --> Clear

Dump the contents of your Sun Java cache -
Start --> settings --> control panel --> Java applet --> cache --> clear
or
Start --> settings --> control panel --> Java applet --> general --> settings --> delete
files

Perform another "On Demand" scan of your computer.

* * * Please report back your results * * *

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


 
Reply With Quote
 
Duane Arnold
Guest
Posts: n/a
 
      13th Jun 2005
PWalker wrote:

> Hi, I rann NOD32 recently and got the following as being tojans:
>
> C:\Documents and Settings\user\Application
>

Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-3b328bed-47903523.class
> - Java/ClassLoader.B trojan
>
> C:\Documents and Settings\user\Application
>

Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-5d1b4c65-77d1dc48.class
> - Java/ClassLoader.B trojan
>
> C:\Documents and Settings\user\Application
>

Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-281e147b-26c755fc.class
> - Java/Exploit.Bytverify trojan
>
> ... but are they really? Can I delete them? They are present in my 'cache'
> which i am guessing is stuff i can delete i.e. similar to a 'Temp' folder?
>


Why don't you delete all the files out of the *cache* directory and be done
with it? You can do it with the browser or you can do it manually.

Duane
 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Trojan Downloader TargetSavers (Trojan)? Paul Security and Anti-Spyware Community 1 18th Jun 2005 01:11 AM
trojan.windowsservice.A / trojan.startup.d Troy Security and Anti-Spyware Community 2 3rd Mar 2005 11:52 PM
TROJAN DROPPER AND TROJAN HORSE VIRUS!! PLZ HELP Windows XP General 2 18th Dec 2003 05:13 PM
Is Trojan.Swice.11384 a real trojan? plz reply asap! thanx! :) Windows XP Performance 1 14th Nov 2003 02:31 PM
Having Problems with Trojan Fix, says Trojan not on computer... JVNSLN Windows XP Internet Explorer 2 26th Oct 2003 01:19 AM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 07:27 PM.