| reply to aussie in uk
Re: Java/Byte Verify Some further info: »ByteVerify Myth within Sun Java Cache |
|
BPremium,MVM
join:2000-10-28 |
Thanks, mens rea  ! Perfect thread reference.
So then the files may be harmless in context, but they DO contain intentionally malicious code?
I wouldn't call those "false positives" then. It's the same as finding a Windows file in a .ZIP archive while scanning on a Linux server.
-- B
--
In a realm outside causality and function
|
|
|
|
| reply to mens rea
Hi all, Thanks for all the info. Really appreciate it.
I have had a look at all the suggestions, I am not running any version (To my knowledge) of sun java....
I have been able to locate the jar files & delete them & my av is not picking it up as a threat anymore - but there is an infected archive I noticed on the av that appears locked or I can not delete it? Any problems with this? If it is all ok, what is best to protect in the future? |
|
Reviews:
 ·Shaw
| said by aussie in uk:
I have had a look at all the suggestions, I am not running any version (To my knowledge) of sun java....
I have been able to locate the jar files & delete them & my av is not picking it up as a threat anymore - but there is an infected archive I noticed on the av that appears locked or I can not delete it? Any problems with this? If it is all ok, what is best to protect in the future?
Don't know your OS but it may be worth your while to check to see what version of java you are running (assuming it is MSJVM): Check for MSJVM If it is build 3810 or later it will be a patched version and not vulnerable to the exploit, as Name Game points out in the link I referenced: MSB MS03-011 |
|
| Awesome thanks, Have checked all that & appears that I am running version 3810, So Happy now.
Cheers all. Aussie in UK. |
|
| reply to B
said by B:So then the files may be harmless in context, but they DO contain intentionally malicious code? I wouldn't call those "false positives" then. It's the same as finding a Windows file in a .ZIP archive while scanning on a Linux server. This is exactly what I was suggesting in the thread linked by mens rea
--
From the GSV "Ethics Gradient" |
|
