Results 1 to 6 of 6

Thread: VIRUS

  1. #1
    Join Date
    Dec 2003
    Posts
    642

    VIRUS

    Hi guys,

    NORTON found this virus in SUN JAVA directory:

    Source: Parser.class
    Description: The compressed file Parser.class within C:\WINDOWS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\noc heat.jar-2718a0ba-41d3694f.zip is infected with the Trojan.ByteVerify virus.


    You all should make a full scan in this directory.

  2. #2
    Join Date
    Dec 2003
    Posts
    642
    Just for the recorder, I found in this directory the MD5crk java applet.

  3. #3
    Join Date
    Jul 2003
    Posts
    390
    My Avast also found this same identical thing, about a hundred files in there. I just thought it was my regular JAVA, but now I don't think so.
    Could it be that when you visit the MD5 site that it DL's this onto your computer silently? I have been to the site a few times to see what the "magic button" uproar was all about, but have never actually DL'd the MD5 program.
    If this has something to do with MD5, it definitely doesn't sound like good news for them---just my opinion. I was planning on starting it up on a couple tonight, but may not now.
    I noticed a similiar post was made at USD also pertaining to this.

  4. #4
    Join Date
    Dec 2003
    Posts
    642
    Quote Originally Posted by offamychain
    Could it be that when you visit the MD5 site that it DL's this onto your computer silently?
    I noticed a similiar post was made at USD also pertaining to this.
    I think so. I quiet using that project because I noticed speed decrease on my computer. I found that MD5 java applet was running in loop every time I started OPERA and discovered some files in SUN directory. I deleted them and since then those problems simply disappeared.

  5. #5
    Join Date
    Jul 2003
    Posts
    390
    I deleted mine too. Out of extreme curiosity, I'm gonna play with the "magic button" a while tonight to see if I can't get the "virus-part" back.
    That sound sorta stupid, don't it? :roll: :roll:
    Maybe it won't blow up.
    But I agree with you, after investigating my surfing & stuff, this is the ONLY logical site where I coulda picked this crap up at.

  6. #6
    Join Date
    Jul 2003
    Posts
    390
    EM99, just went to the MD5 site & let the Magic-Button do it's magic for a couple minutes, & to answer your question, YES. It will follow you home. It will recreate the ENTIRE "Sun/Java" directory on your computer, with about 20 folders inside it.

    However, immediately, there's only 3 files inside it. Whether it makes the hundreds more that we wound up with in the future, I don't know...'cause "WapAKaZaam", they're all gone...again. :D :D :D

    The 2 files you asked about were there:

    C:\D.& S.\..\A.D.\Sun\Java\Deploy\cache\javapi\jar\md5crk .jar-......IDX

    and another by the same name, but in a ZIP format.

    There is also another file elsewhere:

    C:\D.& S.\...\A.D.\Sun\Java\Deployment\log\plugin142_03.t race

    It also leaves a crap-load of cookies in your Cookie & Temp. files for your enjoyment.

    (I also posted this at USD, 'case you find it there 1st)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •