[NOD32] I get Java/ClassLoader.B trojan ..&.. Java/Exploit.Bytverify trojan

  • Thread starter Thread starter PWalker
  • Start date Start date
P

PWalker

Hi, I rann NOD32 recently and got the following as being tojans:

C:\Documents and Settings\user\Application
Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-3b328bed-47903523.class
- Java/ClassLoader.B trojan

C:\Documents and Settings\user\Application
Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-5d1b4c65-77d1dc48.class
- Java/ClassLoader.B trojan

C:\Documents and Settings\user\Application
Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-281e147b-26c755fc.class
- Java/Exploit.Bytverify trojan

.... but are they really? Can I delete them? They are present in my 'cache'
which i am guessing is stuff i can delete i.e. similar to a 'Temp' folder?

Any advice on what i should do?

Many thanks,

peter
 
Any advice on what i should do?
Click to expand...
You can:
a) submit the files to Eset for analysis. Here is how:
"To submit a suspicious file to Eset for analysis, please carry on as
follows:

* compress the file(s) into a zip or rar archive, protect it with the
password "infected"
* attach the archive to an email message
* send the message with the attachment to (e-mail address removed) "
b) get a second opinion by testing the files with online scanners like
http://virusscan.jotti.org/ and
http://www.virustotal.com/flash/index_en.html

Jari
 
From: "PWalker" <[email protected]>

| Hi, I rann NOD32 recently and got the following as being tojans:
|
| C:\Documents and Settings\user\Application
| Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-3b328bed-47903523.class
| - Java/ClassLoader.B trojan
|
| C:\Documents and Settings\user\Application
| Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-5d1b4c65-77d1dc48.class
| - Java/ClassLoader.B trojan
|
| C:\Documents and Settings\user\Application
| Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-281e147b-26c755fc.class
| - Java/Exploit.Bytverify trojan
|
| ... but are they really? Can I delete them? They are present in my 'cache'
| which i am guessing is stuff i can delete i.e. similar to a 'Temp' folder?
|
| Any advice on what i should do?
|
| Many thanks,
|
| peter
|

They are real and quite common...

Dump the contents of your IE cache -
Start --> settings --> control panel --> Internet options --> delete files

Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
Tools --> Options --> Privacy --> Cache --> Clear

Dump the contents of your Sun Java cache -
Start --> settings --> control panel --> Java applet --> cache --> clear
or
Start --> settings --> control panel --> Java applet --> general --> settings --> delete
files

Perform another "On Demand" scan of your computer.

* * * Please report back your results * * *
 
PWalker said:
Hi, I rann NOD32 recently and got the following as being tojans:

C:\Documents and Settings\user\Application
Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-3b328bed-47903523.class
- Java/ClassLoader.B trojan

C:\Documents and Settings\user\Application
Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-5d1b4c65-77d1dc48.class
- Java/ClassLoader.B trojan

C:\Documents and Settings\user\Application
Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-281e147b-26c755fc.class
- Java/Exploit.Bytverify trojan

... but are they really? Can I delete them? They are present in my 'cache'
which i am guessing is stuff i can delete i.e. similar to a 'Temp' folder?
Click to expand...

Why don't you delete all the files out of the *cache* directory and be done
with it? You can do it with the browser or you can do it manually.

Duane :)
 
Back
Top