Confused by Java

[Fleur]

I downloaded Sun Java and now my computer keeps getting infected with
Trojan.ByteVerify or Trojan.Download. I have XP Home and use Norton's AV and
firewall. These viruses seem to be attached to the Java. I uninstalled the
Java and stopped getting them, but as soon as I reinstalled Java they
started popping up again. Should I have installed some other form of Java?
I'm quite confused. I don't understand the difference between the Microsoft
Java Virtual Machine and Sun Java. Which one should I have installed? Can
someone help?

I know that today someone else asked about Java, but I couldn't understand
the answer.

Thanks.

 

[Bruce Chambers]

Greetings --

As the result of a lawsuit by Sun Microsystems, and the ensuing
settlement, Microsoft is no longer allowed to provide its own Java
Virtual Machine to Windows users. You can get almost the same
functionality by downloading Sun's version of Java from
http://java.sun.com/getjava/index.html. If you want the broader
capabilities of Microsoft's Java Virtual Machine, it is still
available from a lot of 3rd-party web sites, some of which are listed
here: http://www.java-virtual-machine.net/download.html.

If you do choose the Microsoft JVM, be sure to visit Windows
Update to apply a needed security patch.

Microsoft Security Bulletin MS03-011
http://www.microsoft.com/security/security_bulletins/ms03-011.asp
(Prevents the Trojan.ByteVerify issue)

Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[johnf]

ByteVerify virus appears under various names, Exploit-ByteVerify,
Exploit.Java.Bytverify, JAVA_BYTVERIFY.A, so it doesn't mean you are getting
it by installing Java.

MS critical Update 816093 was supposed to block this.
Make sure you have all the MS updates and that your AV is also up to date.

If you still have troubles with it go to & follow the instructions at -
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

Microsoft's SP1 contained their version of Java with SP1, but were forced to
withdraw it by Sun, who developed Java & it has now been excuded in SP1a.
It really doesn't matter which Java you use.
I actually have both installed and don't have any problems.

 

[Fleur]

Thank you, Bruce. Please help again.

I followed the directions given, going all the way to the critical updates
page. Microsoft's scan says I have all my critical updates, but there are
two XP updates I could install.
1. Update for Jet 4.0 service pack 8, and
2. Direct X 9.0b End-User Runtime.
Is one of these the update needed for Java? According to the directions
given to see if I have Microsoft VM on my computer, I have version 3810,
which it says is the lowest version which should have protection built in
against the Byte virus (obviously not, in my case). In other words, when I
went to the Security Bulletin MS03-011, it sent me to the critical updates
page and I don't know if either of the updates offered for my machine will
be the one I want.

Sorry to be so confused. Usually I can figure these things out, but this one
has me stumped and I don't like that virus getting through all the time.

Thanks again.

 

[Bruce Chambers]

Greetings --

No, neither of those updates affect the JVM. If you've already
installed JVM 3810, there are no more updates available. Perhaps
you've encountered a newer variant of the Trojan? You might try using
the removal instructions here:

Trojan.ByteVerify
http://securityresponse.symantec.com/avcenter/venc/data/trojan.byteverify.html


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH