Forum Home
Press F1
 
Thread ID: 45168 2004-05-12 06:20:00 java-bytever.a HELP PLEASE! Mantis (3703) Press F1
Post ID Timestamp Content User
235968 2004-05-12 06:20:00 While surfing this afternoon, pc-cillin popped up and told me that it had
discovered java-bytever.a virus and it could neither quarantine or clean
the virus.

Then some unknown program (forgot the name) tried to access the internet through ZoneAlarm. I deneid it access, then I disconnected from
the internet.

After a quick investigation, I found that java-bytever.a is a java virus and
was sitting in a file in my 'temporary internet files'. I then used windows
washer to delete all my internet cache. I immediately scanned with
pc-illin which found nothing, then with ad-aware and spybot which both found nothing.

Did I manage to delete all traces of this virus?

Or is my system simply tricked into believing so?

I am running XP home...

Is java scripting that necessary while surfing or is it more of a risk to
have it enabled.

As always everybody's help and advice is appreciated.

Thanks,

Mantis. 		Mantis (3703)
235969 2004-05-12 07:17:00 The chances are that the virus could still be in your System Restore points .

To remove it from this location you will need to disable System Restore and reboot your computer . After rebooting run the anti-virus again then re-enable system restore . 		Susan B (19)
235970 2004-05-12 07:26:00 Look at the log PCcillin log files. On my version (2002) they are found in the Standard view mode under View Logs > Virus Logs. Sometimes PCcillin will give you a pop up saying it hasen't manged to clean or quarantibe such and such a beastie when in fact it has on a later attempt done so.

Latest pattern file for PCcillin is 889, do you have it? (although that paricular nastie has been around awhile)

Cheers Murray P 		Murray P (44)
235971 2004-05-12 07:29:00 Just to clarify. The logs are found in the Standard view of the Main PCcillin program window.

Cheers Murray P 		Murray P (44)
235972 2004-05-12 07:46:00 Thanks for your help.

I did look at my PC-Illin logs immediately after I was notified that I had a
virus. The logs said that both quarantine and clean failed.

the infected file was 'loaderadv74[1].jar' and was located in my internet
cache. I used windows washer to delete and 'bleech' my internet cache
when I found that PC-illin had failed to to clean or quarantine the file.

My log still has that it failed to clean or quarantine.

I am now going to disable system restore and reboot, rescan and turn
system restore on again.

Thanks.

Mantis. 		Mantis (3703)
235973 2004-05-12 08:12:00 Is there any way to avoid maliscious (*sp) java applets in the future.

I have read that MS have developed a patch (or update) for XP but
I am not sure whether I have installed it or not.

Thanks

Mantis 		Mantis (3703)
235974 2004-05-14 01:50:00 Read up (www.spywareinfo.com)

Download and run the latest CWShredder from the above link. Even if it doesn't find anything there is advise on how to apply the MSJava patches or uninstall VM.

Get Spybot S&E 1.3 (RC if necessary) and run that. There are links within the Spybot programme to and the Spybot website to CWshredder and Spyware Blaster.

Cheers Murray P 		Murray P (44)
1