<red-faced> Thanks. They did a great job of hiding it this time around.

Mike Hall (MS-MVP) wrote:
> Robear
>
> Open the Java Control Panel.. use the 'delete files' to clear the cache
> ensuring that all three boxes are checked, then go into 'Settings' - view
> applets.. at the bottom left corner uncheck 'enable caching'.. ok out of
> there..
>
> Job done.. and yes, that is for version 1.5.0_06..
>
>
> "PA Bear" <PABearMVP@gmail.com> wrote in message
> news:%238U8AUaDGHA.2664@TK2MSFTNGP15.phx.gbl...
> > Have you tried doing so in v1.5.0_06?
> > --
> > ~Robear Dyer (PA Bear)
> > MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP, DTS-L.org
> >
> > Mike Hall (MS-MVP) wrote:
> > > It is easy enough to disable Java caching in the Java console, which
> > > is where the offending items sit..
> > >
> > >
> > > "PA Bear" <PABearMVP@gmail.com> wrote in message
> > > news:Oa6UwQZDGHA.2320@TK2MSFTNGP11.phx.gbl...
> > > > Windows version?
> > > >
> > > > > Was told I can get update from Windows to do so. Need to know what
> > > > > update I need & also how to apply it.
> > > >
> > > > Install all critical and recommended updates.
> > > >
> > > > How to configure and use Automatic Updates in Windows XP:
> > > > http://support.microsoft.com/?kbid=306525
> > > >
> > > > To deal with Java/Byte-Verify:
> > > >
> > > > 1. Uninstall your current Java package via Add/Remove Programs.
> > > >
> > > > 2. Next, navigate to and delete:
> > > >
> > > > C:\Program Files\Java <=this folder
> > > >
> > > > 3. Then go to http://www.java.com/en/download/manual.jsp and click
> > > > the link to download the Windows (Offline Installation) package:
> > > > Save it, do
> > > > NOT run it.
> > > >
> > > > 4. When the download is complete, close the browser and install it.
> > > >
> > > > If the problem persists: Control Panel > Java > General > Delete
> > > > Temporary Internet Files.
> > > > --
> > > > ~Robear Dyer (PA Bear)
> > > > MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP,
> > > > DTS-L.org Grannimom wrote:
> > > > > I have aquired this virus in: Jvb.class,MainApp.class &
> > > > > proc[1].jar-c/documents and my virus scan can not heal it.
> > > > > Was told I can get update from Windows to do so. Need to know what
> > > > > update I need & also how to apply it.
> > > > > I am not really computer literate.
> > > > > Was downloading updates & got booted & now can not find the link
> > > > > to continue doing it. Thanks for any help.Mary

From: "PA Bear" <PABearMVP@gmail.com>


|
| CrystalBall© tells me hers is not up-to-date [OK, so shoot me], so she /may/
| be vulnerable to your all-time favorite, Vundo/Winfixer! <VBEG>

Shoot you ? No way !

Just putting in my two fartherings into the thread.

What I find interesting is that when I view many HJT logs of those who are infected I often
find the following running...

C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe

Not that jusched.exe is a problem but, it is indicative of a platform using an old version
(in the above case JRE 1.4.2_01) of Sun Java and they had a Vundo Trojan.

I have also read some interesting and corresponding data provided by Mow Green.

BTW: I beefed up my WinFixerFix and SmitFraud tools Today :-)

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

lol.. it took me a few minutes to find out how.. I kept re-opening the Java
Control Panel in the hope that it would change.. alas, my hopes were
dashed.. then I noticed the little check box in the corner..

--
Mike Hall
MVP - Windows Shell/User


"PA Bear" <PABearMVP@gmail.com> wrote in message
news:Oi4YyCcDGHA.1384@TK2MSFTNGP11.phx.gbl...
> <red-faced> Thanks. They did a great job of hiding it this time around.
>
> Mike Hall (MS-MVP) wrote:
>> Robear
>>
>> Open the Java Control Panel.. use the 'delete files' to clear the cache
>> ensuring that all three boxes are checked, then go into 'Settings' - view
>> applets.. at the bottom left corner uncheck 'enable caching'.. ok out of
>> there..
>>
>> Job done.. and yes, that is for version 1.5.0_06..
>>
>>
>> "PA Bear" <PABearMVP@gmail.com> wrote in message
>> news:%238U8AUaDGHA.2664@TK2MSFTNGP15.phx.gbl...
>> > Have you tried doing so in v1.5.0_06?
>> > --
>> > ~Robear Dyer (PA Bear)
>> > MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP, DTS-L.org
>> >
>> > Mike Hall (MS-MVP) wrote:
>> > > It is easy enough to disable Java caching in the Java console, which
>> > > is where the offending items sit..
>> > >
>> > >
>> > > "PA Bear" <PABearMVP@gmail.com> wrote in message
>> > > news:Oa6UwQZDGHA.2320@TK2MSFTNGP11.phx.gbl...
>> > > > Windows version?
>> > > >
>> > > > > Was told I can get update from Windows to do so. Need to know
>> > > > > what
>> > > > > update I need & also how to apply it.
>> > > >
>> > > > Install all critical and recommended updates.
>> > > >
>> > > > How to configure and use Automatic Updates in Windows XP:
>> > > > http://support.microsoft.com/?kbid=306525
>> > > >
>> > > > To deal with Java/Byte-Verify:
>> > > >
>> > > > 1. Uninstall your current Java package via Add/Remove Programs.
>> > > >
>> > > > 2. Next, navigate to and delete:
>> > > >
>> > > > C:\Program Files\Java <=this folder
>> > > >
>> > > > 3. Then go to http://www.java.com/en/download/manual.jsp and click
>> > > > the link to download the Windows (Offline Installation) package:
>> > > > Save it, do
>> > > > NOT run it.
>> > > >
>> > > > 4. When the download is complete, close the browser and install it.
>> > > >
>> > > > If the problem persists: Control Panel > Java > General > Delete
>> > > > Temporary Internet Files.
>> > > > --
>> > > > ~Robear Dyer (PA Bear)
>> > > > MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP,
>> > > > DTS-L.org Grannimom wrote:
>> > > > > I have aquired this virus in: Jvb.class,MainApp.class &
>> > > > > proc[1].jar-c/documents and my virus scan can not heal it.
>> > > > > Was told I can get update from Windows to do so. Need to know
>> > > > > what
>> > > > > update I need & also how to apply it.
>> > > > > I am not really computer literate.
>> > > > > Was downloading updates & got booted & now can not find the link
>> > > > > to continue doing it. Thanks for any help.Mary
>

> I have also read some interesting and corresponding data provided by Mow
> Green.

Yep, that's what I was thinking about. (Mow's my twin brother, 'cept he's
ugly & a drunk).
--
~PA Bear


David H. Lipman wrote:
> > CrystalBall© tells me hers is not up-to-date [OK, so shoot me], so she
> > /may/ be vulnerable to your all-time favorite, Vundo/Winfixer! <VBEG>
>
> Shoot you ? No way !
>
> Just putting in my two fartherings into the thread.
>
> What I find interesting is that when I view many HJT logs of those who
> are infected I often find the following running...
>
> C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
>
> Not that jusched.exe is a problem but, it is indicative of a platform
> using an old version (in the above case JRE 1.4.2_01) of Sun Java and
> they had a Vundo Trojan.
>
> I have also read some interesting and corresponding data provided by Mow
> Green.
>
> BTW: I beefed up my WinFixerFix and SmitFraud tools Today :-)