Follow-up Question

View previous topic View next topic Go down

Follow-up Question

Post by tiburonfirst on 22nd November 2010, 7:23 pm

hi, just about 2 weeks ago i got help here to clean up my laptop. as part of this regiment i was told to delete ALL java versions and updates, download the newest version to my desktop and install from there. all this i did and my laptop was considered clean.
much to my surprise, today mse found a trojan, java/rowindal.d, and removed it.
mse support shows this to be a vulnerability of java, especially for older versions and recommends a fresh install.
why did this happen and do i need to reinstall again?
thanks so much!


Last edited by tiburonfirst on 22nd November 2010, 9:25 pm; edited 1 time in total

tiburonfirst
Intermediate
Intermediate

Posts Posts : 52
Joined Joined : 2010-10-24
Gender Gender : Female
OS OS : xp pro media edition
Protection Protection : mse
Points Points : 23002
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Follow-up Question

Post by Dr Jay on 22nd November 2010, 9:09 pm

Security question, so moved to Computer Security.

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 14310
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Arch. Arch. : x64 (64-bit)
Protection Protection : Bitdefender Total Security
Points Points : 302971
# Likes # Likes : 10

View user profile

Back to top Go down

Re: Follow-up Question

Post by tiburonfirst on 22nd November 2010, 9:23 pm

thank you!
in the meanwhile i verified my java installation, i do have version 6, update 22 installed.
i updated my mbam and ran a quick scan, everything was clean. can post log file if needed.
looking again at my mse history i realized trojanDownloader:Java/OpenStream.AM
was removed at the same time as the rowindal
do i need to worry?

tiburonfirst
Intermediate
Intermediate

Posts Posts : 52
Joined Joined : 2010-10-24
Gender Gender : Female
OS OS : xp pro media edition
Protection Protection : mse
Points Points : 23002
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Follow-up Question

Post by Gabethebabe on 24th November 2010, 12:31 pm

If mbam comes up clean you should be OK

However, if you see strange "virus-like" things happen, please read this and after that post here.

When you install the latest java (update 22 as you already did), make sure to also uninstall all older versions. Besides that it might be a good idea to empty the Java cache:
Go to Start > Control Panel > Java to open the Java Control Panel.
Under the General tab, Temporary Internet Files click Settings, then click Delete Files.
Select both options and click OK to delete the Java cache.

Gabethebabe
Top Dog
Top Dog

Posts Posts : 1568
Joined Joined : 2010-03-07
Gender Gender : Male
OS OS : Win7
Points Points : 38258
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Follow-up Question

Post by tiburonfirst on 24th November 2010, 1:43 pm

i tried to clear the java cache but not sure i succeeded. the program seems to freeze during the last step.

tiburonfirst
Intermediate
Intermediate

Posts Posts : 52
Joined Joined : 2010-10-24
Gender Gender : Female
OS OS : xp pro media edition
Protection Protection : mse
Points Points : 23002
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Follow-up Question

Post by Nazzgull on 24th November 2010, 7:12 pm

Hi, would you like to go to Add or Remove Programs > click to Uninstall Java. If you can't uninstall Java, use Windows Installer Clean-Up Utility. Install new one, and it should be fine now, use offline installer from Java website.

Do you still have question ?



Nazzgull
Top Dog
Top Dog

Posts Posts : 2330
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : Windows 7 Professional
Points Points : 40495
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Follow-up Question

Post by tiburonfirst on 24th November 2010, 7:38 pm

i will give this a try later on. if i have further questions i will report back.

one thing that puzzles me though, a patch or update for rowindal was supposed to have been issued back in july i believe, so why would this trojan have shown up during a mse scan when i have java version 6, update 22?
thanks so much for all the volunteer work you guys do here

tiburonfirst
Intermediate
Intermediate

Posts Posts : 52
Joined Joined : 2010-10-24
Gender Gender : Female
OS OS : xp pro media edition
Protection Protection : mse
Points Points : 23002
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Follow-up Question

Post by Nazzgull on 24th November 2010, 7:59 pm

Malware can show up when they like ;) You don't have to worry, we can advice you if you're infected. For now, lets just remove Java installation.



Nazzgull
Top Dog
Top Dog

Posts Posts : 2330
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : Windows 7 Professional
Points Points : 40495
# Likes # Likes : 1

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum