Java virus

[Jan]

I have been using AVG and things seem to be fine, but recently I ran a
full system scan that I actually looked at. It seems that I have a
number of instances of a virus in Java. AVG was running its check, but
it did not notify me about these. Now that I check the test results, I
see they have been detected for about a week.

However, AVG does not fix them, they are still there. Other viruses
have been found and removed. Should I do something about these viruses
in Java? What is the best thing to do at this point--download a new
version of Java and uninstall the old version?

Thank you,

Jan

 

[David H. Lipman]

I'll give you the SAME answer I gave "W????n" Yesterday...

Delete the JAR or ZIP file with the infected .CLASS files

Go to ..
start --> settings --> control panel --> java

Clear the Java cache.

Then perform the following...

1) Download the following two items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Download the signature files (pattern files) by obtaining the ZIP file.
For example; lpt307.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.

2) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
3) Reboot your PC into Safe Mode
4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform
6) If you are using WinME or WinXP, Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) If you are using WinME or WinXP, create a new Restore point
9) Please report back your results

Dave






| I have been using AVG and things seem to be fine, but recently I ran a
| full system scan that I actually looked at. It seems that I have a
| number of instances of a virus in Java. AVG was running its check, but
| it did not notify me about these. Now that I check the test results, I
| see they have been detected for about a week.
|
| However, AVG does not fix them, they are still there. Other viruses
| have been found and removed. Should I do something about these viruses
| in Java? What is the best thing to do at this point--download a new
| version of Java and uninstall the old version?
|
| Thank you,
|
| Jan
|

 

[W????n]

Hmmm

Sounds familiar. : )

 

[David H. Lipman]

Posters rarely read a News Group for an answer to their problem prior to posting their
problem. During the height of the Blaster/Lovsan infection in 2003, repeat queries were
posted almost hourly in microsoft.public.security.virus

Dave




| Hmmm
|
| Sounds familiar. : )

 

[Max M.Wachtel III]

Posters rarely read a News Group for an answer to their problem prior to posting their
problem. During the height of the Blaster/Lovsan infection in 2003, repeat queries were
posted almost hourly in microsoft.public.security.virus

Dave

David-
When I run the Sysclean program,the first thing it does is connect to
servers and downloads the latest dat file.Why does the instructions say
to download the file manually?
-max
--
Keeping Windows Clean: http://www.geocities.com/maxpro4u/madmax.html
Virus Cleaning+Fixes: http://www.geocities.com/maxpro4u/TechPros
Change nomail.afraid.org to neo.rr.com so you can reply by e-mail
(nomail.afraid.org has been set up specifically for
use in Usenet. Feel free to use it yourself.)

 

[David H. Lipman]

Max:

When I run sysclean.com (w/o any TrendMicro applications installed) and without any Pattern
File I get an error message indicating no Pattern File was found. Are you using Art's
Sys-Up utility ?

Dave



| David H. Lipman wrote:
| > Posters rarely read a News Group for an answer to their problem prior to posting their
| > problem. During the height of the Blaster/Lovsan infection in 2003, repeat queries were
| > posted almost hourly in microsoft.public.security.virus
| >
| > Dave
| >
| >
| >
| David-
| When I run the Sysclean program,the first thing it does is connect to
| servers and downloads the latest dat file.Why does the instructions say
| to download the file manually?
| -max
| --
| Keeping Windows Clean: http://www.geocities.com/maxpro4u/madmax.html
| Virus Cleaning+Fixes: http://www.geocities.com/maxpro4u/TechPros
| Change nomail.afraid.org to neo.rr.com so you can reply by e-mail
| (nomail.afraid.org has been set up specifically for
| use in Usenet. Feel free to use it yourself.)

 

[W????n]

David-
When I run the Sysclean program,the first thing it does is connect to
servers and downloads the latest dat file.Why does the instructions say to
download the file manually?
-max
--

I had no issues installing and running as suggested by David.

It did take about 3 hours to complete the scan. About 33 gigs.



WS

 

[Jan]

David,

Thank you and others for the responses. While waiting for an answer, I
became impatient (i.e., panicky). I installed the latest version of
Java. I reran the AVG virus checker and saw that I still had the
viruses, but I calmed down enough to note that all the virus files were
in the cache, and that they were all *.zip files, which probably meant
that they were not needed for regular operation. I created a desktop
folder and moved (cut and pasted) them into the folder; I could restore
them if things went bad. Once I determined that I could reboot and that
everything still worked, I reran AVG antivirus and I see that my only
virus-infected files are these same zipped files, now in the special
folder. I intend to delete the folder (full delete, not just delete to
the trash), and I expect that this will solve my problem.

Thank you again for the help. I printed out your answer and I will keep
it on file.

How would I search the newsgroup answers for the solution to a problem?
I do not follow this newsgroup, and I suspect that most question
posters simply come here when they are in trouble, like me.

Jan

 

[Max M.Wachtel III]

Max:

When I run sysclean.com (w/o any TrendMicro applications installed) and without any Pattern
File I get an error message indicating no Pattern File was found. Are you using Art's
Sys-Up utility ?

Dave

David-
It has been so long that maybe I did download the dat file manually.
Now I just open sysclean and a download starts.
-max

| David H. Lipman wrote:
| > Posters rarely read a News Group for an answer to their problem prior to posting their
| > problem. During the height of the Blaster/Lovsan infection in 2003, repeat queries were
| > posted almost hourly in microsoft.public.security.virus
| >
| > Dave
| >
| >
| >
| David-
| When I run the Sysclean program,the first thing it does is connect to
| servers and downloads the latest dat file.Why does the instructions say
| to download the file manually?
| -max
| --
| Keeping Windows Clean: http://www.geocities.com/maxpro4u/madmax.html
| Virus Cleaning+Fixes: http://www.geocities.com/maxpro4u/TechPros
| Change nomail.afraid.org to neo.rr.com so you can reply by e-mail
| (nomail.afraid.org has been set up specifically for
| use in Usenet. Feel free to use it yourself.)

--
Keeping Windows Clean: http://www.geocities.com/maxpro4u/madmax.html
Virus Cleaning+Fixes: http://www.geocities.com/maxpro4u/TechPros
Change nomail.afraid.org to neo.rr.com so you can reply by e-mail
(nomail.afraid.org has been set up specifically for
use in Usenet. Feel free to use it yourself.)