Java & ZA

[JimL]

Why is something called Java (TM) Binary constantly asking to get out
through my firewall?

 

[Bob Lucas]

Checking for updates, maybe? Or something sinister, perhaps?

Recent advice from Bleeping Computer warned me that Java on my
computer was out of date. Apparently, older versions have
vulnerabilities that malicious sites can exploit. Consequently,
the advisor asked me to:

• Download the latest version of Java Runtime Environment (JRE)
Version 21 from http://java.sun.com/javase/downloads/index.jsp -
and save it to your desktop.
• Scroll down to where it says "JDK 6 Update 21 (JDK or JRE)...
allows end-users to run Java applications".
• Click the "Download JRE" button to the right.
• Select your Platform: "Windows".
• Select your Language: "Multi-language".
• Read the License Agreement, and then check the box that says:
"Accept License Agreement".
• Click Continue and the page will refresh.
• Click on the link to download Windows Offline Installation and
save the file to your desktop.
• Close any programs you may have running - especially my web
browser.
• Go to Start > Settings > Control Panel, double-click on
Add/Remove Programs and remove all older versions of Java.
• Check (highlight) any item with Java Runtime Environment (JRE
or J2SE) or Java™ in the name.
• Click the Remove or Change/Remove button.
• Repeat as many times as necessary to remove each Java
versions.
• Reboot your computer, once all Java components are removed.
• Then from your desktop, double-click on
jre-6u21-windows-i586-p.exe to install the newest version.

I use Zone Alarm free firewall and AFAIK, I have the latest
version (v.9.2.057.000). This version includes SmartDefense,
which configures program access, whenever advice is available.
In other words, this version of Zone Alarm does not seek approval
for programs on its safe list. If you are using an earlier
version of Zone Alarm without SmartDefense, I suggest you update
ZA to the latest version.

I don't recall any recent prompts for Java (TM) Binary, so I
checked the program list in ZA on my computer. I discovered
numerous entries for Java (TM) Platform Binary (relating to
updates 19, 20 &21). Consequently, your post prompted me to
delete all legacy entries relating to Java U19 & U20.
Interestingly, Zone Alarm has recognized most of my remaining U21
entries as safe, without any intervention on my part.

 

[SC Tom]

Checking for updates, maybe? Or something sinister, perhaps?

Recent advice from Bleeping Computer warned me that Java on my computer
was out of date. Apparently, older versions have vulnerabilities that
malicious sites can exploit. Consequently, the advisor asked me to:

• Download the latest version of Java Runtime Environment (JRE) Version
21 from http://java.sun.com/javase/downloads/index.jsp - and save it to
your desktop.
• Scroll down to where it says "JDK 6 Update 21 (JDK or JRE)... allows
end-users to run Java applications".
• Click the "Download JRE" button to the right.
• Select your Platform: "Windows".
• Select your Language: "Multi-language".
• Read the License Agreement, and then check the box that says: "Accept
License Agreement".
• Click Continue and the page will refresh.
• Click on the link to download Windows Offline Installation and save the
file to your desktop.
• Close any programs you may have running - especially my web browser.
• Go to Start > Settings > Control Panel, double-click on Add/Remove
Programs and remove all older versions of Java.
• Check (highlight) any item with Java Runtime Environment (JRE or J2SE)
or Java™ in the name.
• Click the Remove or Change/Remove button.
• Repeat as many times as necessary to remove each Java versions.
• Reboot your computer, once all Java components are removed.
• Then from your desktop, double-click on jre-6u21-windows-i586-p.exe to
install the newest version.

I use Zone Alarm free firewall and AFAIK, I have the latest version
(v.9.2.057.000). This version includes SmartDefense, which configures
program access, whenever advice is available. In other words, this version
of Zone Alarm does not seek approval for programs on its safe list. If
you are using an earlier version of Zone Alarm without SmartDefense, I
suggest you update ZA to the latest version.

I don't recall any recent prompts for Java (TM) Binary, so I checked the
program list in ZA on my computer. I discovered numerous entries for Java
(TM) Platform Binary (relating to updates 19, 20 &21). Consequently, your
post prompted me to delete all legacy entries relating to Java U19 & U20.
Interestingly, Zone Alarm has recognized most of my remaining U21 entries
as safe, without any intervention on my part.

Or just go to Control Panel, Java, click on the Update tab, then pick Update
Now. I have auto-update turned off so I do that occasionally. Any time I do
an update, I get a slew of ZA warnings (I have the security suite), so I
allow it, but don't check the box. If you're sure that is what is running,
you can check the 'Remember this setting' box and be done with it. Certain
things though I'd like to know what's happening.

I go through the Program page in ZA now and then just to check on what's
still listed. If I have already uninstalled it, I delete the entry. Anything
that has a temp folder location I also clear. May not do anything to leave
them there, but it makes that huge list a lot smaller and easier for me to
see what's trying to access the web. But then I've been told I'm a little
AR/OC

 

[JimL]

Thanks.

I have several questions but I'll start with a statement and a couple
questions.

I wasn't getting this Java binary query until I did a Java update.

Most puzzling, why do I get two separate Java update requests? I OK'd the
first one for local and internet, then this Java Binary thing popped up and
I didn't know but what it was bogus. God knows there is a bunch of bogus
junk floating around everywhere. Last night I got a couple dozen of those
"You have a virus!," pops while googling. (It's enough to make a cusser
preach.)

JimL

 

[Bob Lucas]

I agree that you can merely update Java.

However the expert from Bleeping Computer warned me that 'older
versions [of Java] have vulnerabilities that malicious sites can
exploit. That is probably why he advised me to uninstall all
traces of Java and then, perform a clean reinstallation.

I am sure that is good advice, because Zone Alarm has added the
latest versions of Java to their list of safe programs. I also
agree with SC Tom that the OP should remove all redundant entries
from the program list in Zone Alarm.

Having uninstalled and reinstalled Java, Zone Alarm no longer
warns me about Java activity.

However, the OP's latest post states that last night, he got a
couple dozen of those "You have a virus!," pops while Googling.
If his computer is infected, he should also scan for Malware.
However, that is a separate topic.

 

[SC Tom]

How old was that article from Bleeping Computer (just curious)? When I ran
the updater to get to update 20, it removed update 19. And when I ran it the
other day after reading this thread (reminded me that I hadn't done that in
a while. Thanks!), it installed update 21 and removed 20. I looked in
\program files\java\ and saw only the one installation, and Add/Remove
programs only shows the latest. Maybe the newer updates clean up the older
versions on their own? Don't know for sure, but it seems that way.
--
SC Tom
-There's no such thing as TMI when asking for tech support.

I agree that you can merely update Java.

However the expert from Bleeping Computer warned me that 'older versions
[of Java] have vulnerabilities that malicious sites can exploit. That is
probably why he advised me to uninstall all traces of Java and then,
perform a clean reinstallation.

I am sure that is good advice, because Zone Alarm has added the latest
versions of Java to their list of safe programs. I also agree with SC Tom
that the OP should remove all redundant entries from the program list in
Zone Alarm.

Having uninstalled and reinstalled Java, Zone Alarm no longer warns me
about Java activity.

However, the OP's latest post states that last night, he got a couple
dozen of those "You have a virus!," pops while Googling. If his computer
is infected, he should also scan for Malware. However, that is a separate
topic.

Or just go to Control Panel, Java, click on the Update tab, then pick
Update Now. I have auto-update turned off so I do that occasionally. Any
time I do an update, I get a slew of ZA warnings (I have the security
suite), so I allow it, but don't check the box. If you're sure that is
what is running, you can check the 'Remember this setting' box and be
done with it. Certain things though I'd like to know what's happening.

I go through the Program page in ZA now and then just to check on what's
still listed. If I have already uninstalled it, I delete the entry.
Anything that has a temp folder location I also clear. May not do
anything to leave them there, but it makes that huge list a lot smaller
and easier for me to see what's trying to access the web. But then I've
been told I'm a little AR/OC

 

[Bob Lucas]

The instructions came directly from Bleeping Computer last week -
not from a published 'article'.

I needed to remove a malware infection and as part of the
investigations, one of their technical experts noticed that I was
using Java update 20.

When I checked in Control Panel - Add / Remove programs, I
discovered that updates 18 and 19 were still on my computer. I
removed Java 20 and the earlier updates, before re-installing
Java as a clean installation (which incorporated Update 21).

Then, I opened the Zone-Alarm Control Panel, and removed the
references to all earlier versions.

How old was that article from Bleeping Computer (just curious)?
When I ran the updater to get to update 20, it removed update
19. And when I ran it the other day after reading this thread
(reminded me that I hadn't done that in a while. Thanks!), it
installed update 21 and removed 20. I looked in \program
files\java\ and saw only the one installation, and Add/Remove
programs only shows the latest. Maybe the newer updates clean
up the older versions on their own? Don't know for sure, but it
seems that way.
--
SC Tom
-There's no such thing as TMI when asking for tech support.

I agree that you can merely update Java.

However the expert from Bleeping Computer warned me that
'older versions [of Java] have vulnerabilities that malicious
sites can exploit. That is probably why he advised me to
uninstall all traces of Java and then, perform a clean
reinstallation.

I am sure that is good advice, because Zone Alarm has added
the latest versions of Java to their list of safe programs. I
also agree with SC Tom that the OP should remove all redundant
entries from the program list in Zone Alarm.

Having uninstalled and reinstalled Java, Zone Alarm no longer
warns me about Java activity.

However, the OP's latest post states that last night, he got a
couple dozen of those "You have a virus!," pops while
Googling. If his computer is infected, he should also scan for
Malware. However, that is a separate topic.

Checking for updates, maybe? Or something sinister,
perhaps?

Recent advice from Bleeping Computer warned me that Java on
my computer was out of date. Apparently, older versions
have vulnerabilities that malicious sites can exploit.
Consequently, the advisor asked me to:

• Download the latest version of Java Runtime Environment
(JRE) Version 21 from
http://java.sun.com/javase/downloads/index.jsp - and save it
to your desktop.
• Scroll down to where it says "JDK 6 Update 21 (JDK or
JRE)... allows end-users to run Java applications".
• Click the "Download JRE" button to the right.
• Select your Platform: "Windows".
• Select your Language: "Multi-language".
• Read the License Agreement, and then check the box that
says: "Accept License Agreement".
• Click Continue and the page will refresh.
• Click on the link to download Windows Offline
Installation and save the file to your desktop.
• Close any programs you may have running - especially my
web browser.
• Go to Start > Settings > Control Panel, double-click on
Add/Remove Programs and remove all older versions of Java.
• Check (highlight) any item with Java Runtime Environment
(JRE or J2SE) or Java™ in the name.
• Click the Remove or Change/Remove button.
• Repeat as many times as necessary to remove each Java
versions.
• Reboot your computer, once all Java components are
removed.
• Then from your desktop, double-click on
jre-6u21-windows-i586-p.exe to install the newest version.

I use Zone Alarm free firewall and AFAIK, I have the latest
version (v.9.2.057.000). This version includes
SmartDefense, which configures program access, whenever
advice is available. In other words, this version of Zone
Alarm does not seek approval for programs on its safe list.
If you are using an earlier version of Zone Alarm without
SmartDefense, I suggest you update ZA to the latest version.

I don't recall any recent prompts for Java (TM) Binary, so I
checked the program list in ZA on my computer. I discovered
numerous entries for Java (TM) Platform Binary (relating to
updates 19, 20 &21). Consequently, your post prompted me to
delete all legacy entries relating to Java U19 & U20.
Interestingly, Zone Alarm has recognized most of my
remaining U21 entries as safe, without any intervention on
my part.


Or just go to Control Panel, Java, click on the Update tab,
then pick Update Now. I have auto-update turned off so I do
that occasionally. Any time I do an update, I get a slew of
ZA warnings (I have the security suite), so I allow it, but
don't check the box. If you're sure that is what is running,
you can check the 'Remember this setting' box and be done
with it. Certain things though I'd like to know what's
happening.

I go through the Program page in ZA now and then just to
check on what's still listed. If I have already uninstalled
it, I delete the entry. Anything that has a temp folder
location I also clear. May not do anything to leave them
there, but it makes that huge list a lot smaller and easier
for me to see what's trying to access the web. But then I've
been told I'm a little AR/OC

 

[SC Tom]

Thanks! I wonder why your previous updates didn't remove the older ones?
Might have been because of the infection, who knows?

The instructions came directly from Bleeping Computer last week - not from
a published 'article'.

I needed to remove a malware infection and as part of the investigations,
one of their technical experts noticed that I was using Java update 20.

When I checked in Control Panel - Add / Remove programs, I discovered that
updates 18 and 19 were still on my computer. I removed Java 20 and the
earlier updates, before re-installing Java as a clean installation (which
incorporated Update 21).

Then, I opened the Zone-Alarm Control Panel, and removed the references to
all earlier versions.

How old was that article from Bleeping Computer (just curious)? When I
ran the updater to get to update 20, it removed update 19. And when I ran
it the other day after reading this thread (reminded me that I hadn't
done that in a while. Thanks!), it installed update 21 and removed 20. I
looked in \program files\java\ and saw only the one installation, and
Add/Remove programs only shows the latest. Maybe the newer updates clean
up the older versions on their own? Don't know for sure, but it seems
that way.
--
SC Tom
-There's no such thing as TMI when asking for tech support.

I agree that you can merely update Java.

However the expert from Bleeping Computer warned me that 'older versions
[of Java] have vulnerabilities that malicious sites can exploit. That
is probably why he advised me to uninstall all traces of Java and then,
perform a clean reinstallation.

I am sure that is good advice, because Zone Alarm has added the latest
versions of Java to their list of safe programs. I also agree with SC
Tom that the OP should remove all redundant entries from the program
list in Zone Alarm.

Having uninstalled and reinstalled Java, Zone Alarm no longer warns me
about Java activity.

However, the OP's latest post states that last night, he got a couple
dozen of those "You have a virus!," pops while Googling. If his computer
is infected, he should also scan for Malware. However, that is a
separate topic.




Checking for updates, maybe? Or something sinister, perhaps?

Recent advice from Bleeping Computer warned me that Java on my
computer was out of date. Apparently, older versions have
vulnerabilities that malicious sites can exploit. Consequently, the
advisor asked me to:

• Download the latest version of Java Runtime Environment (JRE)
Version 21 from http://java.sun.com/javase/downloads/index.jsp - and
save it to your desktop.
• Scroll down to where it says "JDK 6 Update 21 (JDK or JRE)...
allows end-users to run Java applications".
• Click the "Download JRE" button to the right.
• Select your Platform: "Windows".
• Select your Language: "Multi-language".
• Read the License Agreement, and then check the box that says:
"Accept License Agreement".
• Click Continue and the page will refresh.
• Click on the link to download Windows Offline Installation and save
the file to your desktop.
• Close any programs you may have running - especially my web
browser.
• Go to Start > Settings > Control Panel, double-click on Add/Remove
Programs and remove all older versions of Java.
• Check (highlight) any item with Java Runtime Environment (JRE or
J2SE) or Java™ in the name.
• Click the Remove or Change/Remove button.
• Repeat as many times as necessary to remove each Java versions.
• Reboot your computer, once all Java components are removed.
• Then from your desktop, double-click on jre-6u21-windows-i586-p.exe
to install the newest version.

I use Zone Alarm free firewall and AFAIK, I have the latest version
(v.9.2.057.000). This version includes SmartDefense, which configures
program access, whenever advice is available. In other words, this
version of Zone Alarm does not seek approval for programs on its safe
list. If you are using an earlier version of Zone Alarm without
SmartDefense, I suggest you update ZA to the latest version.

I don't recall any recent prompts for Java (TM) Binary, so I checked
the program list in ZA on my computer. I discovered numerous entries
for Java (TM) Platform Binary (relating to updates 19, 20 &21).
Consequently, your post prompted me to delete all legacy entries
relating to Java U19 & U20. Interestingly, Zone Alarm has recognized
most of my remaining U21 entries as safe, without any intervention on
my part.


Or just go to Control Panel, Java, click on the Update tab, then pick
Update Now. I have auto-update turned off so I do that occasionally.
Any time I do an update, I get a slew of ZA warnings (I have the
security suite), so I allow it, but don't check the box. If you're sure
that is what is running, you can check the 'Remember this setting' box
and be done with it. Certain things though I'd like to know what's
happening.

I go through the Program page in ZA now and then just to check on
what's still listed. If I have already uninstalled it, I delete the
entry. Anything that has a temp folder location I also clear. May not
do anything to leave them there, but it makes that huge list a lot
smaller and easier for me to see what's trying to access the web. But
then I've been told I'm a little AR/OC