Java Security problem Foistware malware

Beth54 · Guru

Java Security problem Foistware malware

_wombat_ · Master (of Mischief)

hi Guys,

yes I know that this should go into Tech Section but its too important to go there as not many members go there, the advice doing the rounds is that you disable or delete Java IF you have ver 7

http://techtalk.pcpitstop.com/2013/01/14/critical-java-security-risk-requires-immediate-action/

Mike C · Senior Member

Or do an update

_wombat_ · Master (of Mischief)

Mike C wrote:
Or do an update

some tech site's are not recommending an update, don't know why, this problem is only for ver 7 of java

Gerty Dancer · Guru

Thanks wombat.

Santa · Guru

Deleted Java completely about three weeks ago, reclaimed approx 130mb of drive space and don't notice any difference,. smile

Dougwe · Chief one feather

Thanks mate, I can't find it anywhere so I must have flung it ages ago.

_wombat_ · Master (of Mischief)

beth go here

http://www.java.com/en/download/uninstall.jsp

Beth54 · Guru

_wombat_ wrote:
beth go here
http://www.java.com/en/download/uninstall.jsp

Yep, that's what I did but the blue box keeps coming up with below.

jimricho · Guru

_wombat_ wrote:
hi Guys,
yes I know that this should go into Tech Section but its too important to go there as not many members go there, the advice doing the rounds is that you disable or delete Java IF you have ver 7
http://techtalk.pcpitstop.com/2013/01/14/critical-java-security-risk-requires-immediate-action/

Also http://www.staysmartonline.gov.au/alert_service/alerts/oracle_fixes_critical_java_exploit

_wombat_ · Master (of Mischief)

Beth54 wrote:
_wombat_ wrote:
beth go here
http://www.java.com/en/download/uninstall.jsp

Yep, that's what I did but the blue box keeps coming up with below.

it should not be asking you to update, sounds like you are not in the correct area

_wombat_ · Master (of Mischief)

jimricho wrote:
_wombat_ wrote:
hi Guys,
yes I know that this should go into Tech Section but its too important to go there as not many members go there, the advice doing the rounds is that you disable or delete Java IF you have ver 7
http://techtalk.pcpitstop.com/2013/01/14/critical-java-security-risk-requires-immediate-action/
Also http://www.staysmartonline.gov.au/alert_service/alerts/oracle_fixes_critical_java_exploit

jimricho, some tech sites are saying do not use the update, so who to trust that is the problem, I had no problem with my Java v 7 just deleted it but had ver 6 so left that there.

jimricho · Guru

Hmmm, yer gotta wonder haven't you?

grill n chill · Senior Member

A big thank you wombat!

I did as you suggested and deleted java then next ran a full McAfee scan and found the exact virus you are warning about in my daughters profile.

The anti virus program managed to delete it in entirety. No harm done as far as i know with no simtons showing now or before. How good was your post? Thank you wombat.

Here is an important link that summarizes the malware. Please note everyone the infection is rated as very bad.

http://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Exploit%3AJava%2FCVE-2013-0422

The patch from McAfee was only made available yesterday so folks stop what you are doing and update your security NOW!

Glass of wine and count my lucky stars time for me! Shakes wombats hand!

Beth54 · Guru

_wombat_ wrote:
Beth54 wrote:
_wombat_ wrote:
beth go here
http://www.java.com/en/download/uninstall.jsp

Yep, that's what I did but the blue box keeps coming up with below.
it should not be asking you to update, sounds like you are not in the correct area

That's exactly where I am wombat. When I click unistall, windows installer says preparing to remove, then the aforementioned box pops up.

_wombat_ · Master (of Mischief)

Beth, at this stage all I can recommend is you update your virus checker and do a FULL scan, most people think their virus checker does a scan daily, it does not, 9 times out of 10 it does a quick scan, scanning only about 100 files on your system so make sure you do a FULL SCAN

what virus checker do you use beth

Beth54 · Guru

_wombat_ wrote:
Beth, at this stage all I can recommend is you update your virus checker and do a FULL scan, most people think their virus checker does a scan daily, it does not, 9 times out of 10 it does a quick scan, scanning only about 100 files on your system so make sure you do a FULL SCAN
what virus checker do you use beth

I use Microsoft Security Essentials. I was told that was as good as anything. I do a quick scan regularly, but haven't done a full scan for awhile. I'll do that now. If I can't get rid of it, I may have to take it to one of my know-it-all kids. wink biggrin

_wombat_ · Master (of Mischief)

Beth54 wrote:
_wombat_ wrote:
Beth, at this stage all I can recommend is you update your virus checker and do a FULL scan, most people think their virus checker does a scan daily, it does not, 9 times out of 10 it does a quick scan, scanning only about 100 files on your system so make sure you do a FULL SCAN
what virus checker do you use beth

I use Microsoft Security Essentials. I was told that was as good as anything. I do a quick scan regularly, but haven't done a full scan for awhile. I'll do that now. If I can't get rid of it, I may have to take it to one of my know-it-all kids.

MSE is great and its free, might be a good idea for somebody to get hands on to see what is going on.

but in the meantime do the full scan

Santa · Guru

grill n chill wrote:
A big thank you wombat!
I did as you suggested and deleted java then next ran a full McAfee scan and found the exact virus you are warning about in my daughters profile.
The anti virus program managed to delete it in entirety. No harm done as far as i know with no simtons showing now or before. How good was your post? Thank you wombat.
Here is an important link that summarizes the malware. Please note everyone the infection is rated as very bad.
http://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Exploit%3AJava%2FCVE-2013-0422
The patch from McAfee was only made available yesterday so folks stop what you are doing and update your security NOW!
Glass of wine and count my lucky stars time for me! Shakes wombats hand!

Good result GnC,

I agree, good security is an oft overlooked aspect of internet use, until you need it. wink

Beth54 · Guru

Full scan done and no nasties! Phew! I'll still look into why I can't uninstall Java.

_wombat_ · Master (of Mischief)

Beth54 wrote:
Full scan done and no nasties! Phew! I'll still look into why I can't uninstall Java.

wow that was quick, takes about 3 hours to scan my laptop, but it does depend how much stuff you have on there and how big your drive is.

yes, still get one of you know it all kids to look at the java problem for you, going rate at current time for tech work is $85-$95 ph so I hope they will do a reduction for you. biggrin biggrin

Roving-Dutchy · Guru

Beth54 wrote:
I can't seem to uninstall it. The box says 'do you want to allow the following program to update software on this computer?' When I click on no it does nothing. ???
And yes, it is version 7.

-- Edited by Beth54 on Saturday 2nd of February 2013 04:05:28 PM

Hi Beth

The reason you are unable to uninstall Java is when you start the uninstall, the program is asking do you want to update this program and an uninstall is actually an update to your computer so the answer is YES and then the uninstall will go ahead, I know it doesn't seem to make much sense but then computer programmers thought processes are different to those of us common people.

Cheers

David

_wombat_ · Master (of Mischief)

Roving-Dutchy wrote:
Beth54 wrote:
I can't seem to uninstall it. The box says 'do you want to allow the following program to update software on this computer?' When I click on no it does nothing. ???
And yes, it is version 7.

-- Edited by Beth54 on Saturday 2nd of February 2013 04:05:28 PM
Hi Beth
The reason you are unable to uninstall Java is when you start the uninstall, the program is asking do you want to update this program and an uninstall is actually an update to your computer so the answer is YES and then the uninstall will go ahead, I know it doesn't seem to make much sense but then computer programmers thought processes are different to those of us common people.
Cheers
David

thanks RD that could be right, and Beth if it does update you could then retry the uninstall again

bronnie · Senior Member

Thank you Wombat have removed it...... smile

_wombat_ · Master (of Mischief)

bronnie wrote:
Thank you Wombat have removed it......

thats good bronnie, no problems I hope/

Beth54 · Guru

Thanks David. It worked. How weird is that! It did an update to uninstall it!

_wombat_ · Master (of Mischief)

Beth54 wrote:
Thanks David. It worked. How weird is that! It did an update to uninstall it!

good to hear Davids tip helped.

Popeye · Senior Member

I have java 7.11. Its there if you want it on the java site.

_wombat_ · Master (of Mischief)

grill n chill wrote:
An update about my infection.
Firstly even after i uninstalled all of the Java programmes and ran i full McAfee scan and the virus was removed i noticed a very odd behavior with my security. While everything was showing green and fixed with no problems at all with McAfee i discovered my fire wall was actually off but reporting is was on. In other words the virus had entered my McAfee security and was twiddling with the programme.
I reported this to them. I uninstalled and then reinstalled up to date McAfee, ran a full scan again and it picked up the virus yet again, once more the virus tinkered with my security and it was showing false condition. Please note java was again showing up in my programmes.
I next did a restore to a date a year ago and in safe mode deleted java, McAfee and every other unnecessary programme i could think of. Ran CC cleaner to make sure ever little bit of deleted information was totally wiped clean from my puter. Reinstalled up to date security and ran a total scan. I can now report all is OK. Passwords all changed. Security set to stealth and nothing is entering or leaving my puter without explicit permission.All programms left have been updated also In all it hours of work to fix.
No damage was done and no information as far as i can tell has been taken. I was lucky i acted so quickly.
Great post wombat, thank you again

thats all good to hear and CCleaner is the best program out there for cleaning a pc IMHO

and it's FREE get you copy here http://www.filehippo.com/download_ccleaner

when you install ccleaner it has 5 ticks in the second screen I only keep the top and bottom one the rest I untick

-- Edited by _wombat_ on Sunday 3rd of February 2013 01:08:48 PM

_wombat_ · Master (of Mischief)

double post for some strange reason

-- Edited by _wombat_ on Sunday 3rd of February 2013 03:02:15 PM