what is this file?

  • Thread starter Thread starter bullseye
  • Start date Start date
B

bullseye

arc.zip-893e613-11cc5bdb.zip
and
arc.zip-893e613-11cc5bdb.idx

McAfee deleted the first one, and I still have the second one. Shall I
delete it?
 
On that special day, bullseye, ([email protected]) said...
McAfee deleted the first one, and I still have the second one. Shall I
delete it?
Click to expand...

The second one seems to be an index nmae, not a copy of the first one,
but the result of an indexer (your Microsoft Office?) service, which
came across the file, before it was deleted.

Open it with notepad, I guess there are only some notes inside, about
location and so on.


Gabriele Neukam

(e-mail address removed)
 
Gabriele said:
On that special day, bullseye, ([email protected]) said...


The second one seems to be an index nmae, not a copy of the first one,
but the result of an indexer (your Microsoft Office?) service, which
came across the file, before it was deleted.

Open it with notepad, I guess there are only some notes inside, about
location and so on.


Gabriele Neukam

(e-mail address removed)
Click to expand...


Found this info after opening with Notepad:

http://206.222.17.187/display/arc.zip  ,
úh  x.x.x.x¬í wO GManifest-Version: 1.0
Created-By: 1.4.1_02 (Sun Microsystems Inc.)


So, does this mean it is safe to delete?

(thank you for a quick reply)
 
From: "bullseye" <[email protected]>

|
| arc.zip-893e613-11cc5bdb.zip
| and
| arc.zip-893e613-11cc5bdb.idx
|
| McAfee deleted the first one, and I still have the second one. Shall I
| delete it?
|

It looks like a Java Jar and the java index file.

Looking at your second post, I find the ZIP file at the URL infected with the
"Exploit-ByteVerify" Trojan in a .CLASS file in that Java Jar.

Java index files (*.IDX) are safe.
 
From: "David H. Lipman" <[email protected]>


| It looks like a Java Jar and the java index file.
|
| Looking at your second post, I find the ZIP file at the URL infected with the
| "Exploit-ByteVerify" Trojan in a .CLASS file in that Java Jar.
|
| Java index files (*.IDX) are safe.
|

Damn... Clicked on send too soon...

If you are using any version of Sun Java that is prior to JRE Version 5.0,
then you are strongly urged to remove any/all versions that are prior to JRE
Version 5.0. There are vulnerabilities in them and they are actively being exploited.
It is possible that is how you got infected with malware.

Therefore, it is highly suggested that if there are any prior versions of Sun Java
to Version 5 on the PC that they be removed and Sun Java JRE Version 5.0 Update 6
be installed ASAP.

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version...

C:\Program Files\Java\jre1.5.0_06


http://www.java.com/en/download/manual.jsp




1) Dump the contents of your IE cache -
Start --> settings --> control panel --> Internet options --> delete files

2) Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
Tools --> Options --> Privacy --> Cache --> Clear

3) Dump the contents of your Sun Java cache -
Start --> settings --> control panel --> Java applet --> cache --> clear
or
Start --> settings --> control panel --> Java applet --> general --> settings -->
delete files

4) Re-scan your system using your McAfee AV software.
 
David said:
From: "David H. Lipman" <[email protected]>


| It looks like a Java Jar and the java index file.
|
| Looking at your second post, I find the ZIP file at the URL infected with the
| "Exploit-ByteVerify" Trojan in a .CLASS file in that Java Jar.
|
| Java index files (*.IDX) are safe.
|

Damn... Clicked on send too soon...

If you are using any version of Sun Java that is prior to JRE Version 5.0,
then you are strongly urged to remove any/all versions that are prior to JRE
Version 5.0. There are vulnerabilities in them and they are actively being exploited.
It is possible that is how you got infected with malware.

Therefore, it is highly suggested that if there are any prior versions of Sun Java
to Version 5 on the PC that they be removed and Sun Java JRE Version 5.0 Update 6
be installed ASAP.

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version...

C:\Program Files\Java\jre1.5.0_06


http://www.java.com/en/download/manual.jsp




1) Dump the contents of your IE cache -
Start --> settings --> control panel --> Internet options --> delete files

2) Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
Tools --> Options --> Privacy --> Cache --> Clear

3) Dump the contents of your Sun Java cache -
Start --> settings --> control panel --> Java applet --> cache --> clear
or
Start --> settings --> control panel --> Java applet --> general --> settings -->
delete files

4) Re-scan your system using your McAfee AV software.
Click to expand...


Thank you for your comprehensive reply. I found several versions of
Java (6 or 7 folders) going back to 1.4 deleted them. I also cleared IE
and Firefox's cache as well as the files in Java. I will rescan later
after I finish with a few tasks.

regards
 
Back
Top