Java Virus?

Got to work this morning and tried to access the internet and I get a message in both Firefox and Safari that I have a virus and I have been blocked. I called our sys. admin and he said a Javascript was accessing the network so much that the network blocked my Mac. I have Little Snitch and it was not picking anything up, but I did notice my network activity is sky high. He said I had the third largest traffic on the network. He did mention that this script had something to do with itunes, but iTunes was not running. What do you think?

If the problem is Javascript then Little Snitch won't complain because you have authorized Safari to do whatever it wants. You can have Little Snitch show all open network connections. You can also run Activity Monitor to see your network throughput.

Similar Messages

A java virus disabled the click + at the left to open new tab. I have reinstalled firefox but the problem is not fixed. what do i do to fix this?

A java virus disabled the click + at the left to open new tab. I have reinstalled firefox but the problem is not fixed. what do i do to fix this?
admins of forum feel free to edit post.

Try disabling the Ask Toolbar extension.

How to remove latest java virus?

How to remove latest java virus manually as reported in the media?

There is some incorrect information being presented in this thread.
Neither your system nor Java is updated daily. XProtect on 10.6 or above may get automatic updates as they are pushed out by Apple, but not necessariy daily. I have seen a week or more go by without any, and there have been none for the latest Flashback attack.
There are now Java updates for 10.6.8 and 10.7 to patch the vulnerability that is currently being exploited. This Trojan does not necessarily require your password or any user interaction for infection.
Use Software Update to see if there is a Java update for your OS.
The github Flashchecker is inaduate as it depends on outdated definitions.
Try using this one, which is most certainly more current.
http://www.f-secure.com/weblog/archives/00002346.html
Apple is currently developing a detection and removal tool. No idea when it will be ready.
http://support.apple.com/kb/HT5244

Has anyone else had problems with the latest system updates to Mac OS X v10.6.8 with the java virus patch?

After installing the latest updates to Snow Leopard the system hangs up and will not open properly. This is the update to Java, etc after the virus was discovered. I have done the updates on four different systems with the same result.

No problems with the Java update here, although I have Java disabled. Might try reapplying the Java standalone while in Safe Boot (Shift at startup chime), if you did it from Software Update.
http://support.apple.com/kb/DL1516

Java Virus Patch? Did Mac include it in an update?

I heard there was a breach with Java software and a big virus affecting 600,000 Macs. How do I make sure my Mac is clean and not infected? I tried to do a software update, but, it says no updates are available. Did Mac patch this problem on an update ?

MrSkeptic wrote:
I tried to do a software update, but, it says no updates are available.
Apple has made it clear today that they no longer support OS X 10.6.x Snow Leopard when they issued Security Update 2014-001 which is not available for SL. The last time a Java update came out, they didn't provide a similar update for SL then, either.
What that means is that you are in the same boat as users of WIndows XP will be in shortly when it's no longer supported. If you aren't willing or able to upgrade, then you should be especially watchful so as not to become a victim going forward.

JAVA Virus Found - Trojan Horse (URGENT)

I used NAVCE to perform a virus scan on my system and it reported a virus found, trojan horse. Here's the report:
Scan type: Manual Scan
Event: Virus Found!
Virus name: Trojan Horse
File: C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-1012b178-3c3750b0.class
Location: Quarantine
Computer: SLEEP
User: Administrator
Action taken: Clean failed : Quarantine succeeded :
Date found: Fri Oct 24 00:51:03 2003
The folder that the trojan horse resides is a hidden file. Can anyone tell me what's happening? Preferably someone from Sun would like to explain?

forget it. You got that virus from some webpage. Besides, it shouldn't activate unless some moron has changed the defaults on yout windows comp. just delete it, don't lose yer sleep.

HT5244 Are there any signs i should look for that would indicate my system is infected with the new java virus?

Just to keep an eye out.

WZZZ wrote:
I ran it just to see, even though I know I'm clean. I agree with T. Reed's comment that it may not be for the novice user who doesn't know what belongs where.
Which is why they should just press "enter" when in doubt.
I know this isn't your full time job, but perhaps you might want to write another alternate script
Apple says it is going to write one.
Another thing. When it was busy scanning Applications -- I know it says "this may take some time," I gave up and hit skip after giving it a very long time to finish.
Thanks. Don't mean to be ungratefu for your good work on this.
There is no way to tell how long that will take. If I had to edit that script, I would just remove that part. I was following advice that was not accurate in the ensuing blog frenzy. That was costly. I didn't have much time, so should I have gone ahead and scan system areas or done a better job with LaunchAgents? I made the wrong choice.
I always welcome suggestions. Unfortunately, comments on User Tips seem to be locked down pretty tight.
It is a moot point now that Apple is going to write a script. When that happens, I will take down that script. Until then, I'm just reminding people to press "enter" when in doubt.

Message "to open MLBNexDefAutobahn, you need a Java SE 6 runtime. Would you like to install one now?" I click "not now" and it pops open a second later. It won't go away. Help!

I keep getting a pop up window labled Software Update saying, "To open 'MLBNexDefAutobahn,' you need a Java SE 6 runtime. Would you like to install one now?" I click on "Not Now" and it pops open again a second later. It is not going away! Is this a Java virus? I just installed Maverick Wednesday and got a message yesterday on google that "Google would like to take over this computer"??? Please help.
Thanks!

This is not a virus, or any other kind of malware. Some third-party software that you have installed is repeatedly trying to open a Java process called MLBNexDefAutobahn. What that software might be, I don't know. What software do you have that this name might fit with?

Does Java allow you to execute code (Like Registry Modifications) directly

My question is will Java allow me to execute scripts to modify the registry, run external commands, and work with text files directly from a webpage.
My goal is for users to click on a link in a webpage that would do any of the above tasks.
The users have administration rights to the PC

Not per default. If you have an applet, and the user has essentially removed all security restrictions, then sure, in one way or another, it's possible. Is it likely that that will ever occur? No.
Come on, if it did have this ability, don't you think there would be a proliferation of Java Viruses out there, and that then, it would not have that functionaility much longer?

CJS-30152 Java process dispatcher of instance RP8/DVEBMGS01 [ABAP: ACTIVE

We are installing an SAP system with HA option.
System Info :-
OS : RHEL5
Database : Oracle
SID : RP8
physical host: cipocvm
virtual host : ciRP8
While installing CI ,ABAP+JAVA
ABAP Started but JAVA Instance stopped starting in phase "Prepare to install minimal configuration".
Error as below:
ERROR      2012-01-03 20:20:27.346
           CJSlibModule::writeError_impl()
CJS-30152 Java process dispatcher of instance RP8/DVEBMGS01 [ABAP: ACTIVE, Java: (dispatcher: UNKNOWN, server0: UNKNOWN)] did not reach state STARTING_APPS after 20:00 minutes. Giving up.
logs:
Idx
Name
PID
State
Error
Restart
0
dispatcher
0
Stopped
4
no
1
server0
0
Stopped
4
no
2
SDM
24424
Running
0
yes
defaultTrace.0.trc -
>
om.sap.engine.core.service630.container.ServiceStopper#######SAPEngine_System_Thread[impl:5]_71##0#0#Error##Plain###Service webdynpro error com.sap.tc.webdynpro.services.exceptions.WDRuntimeException: Failed to access Web Dynpro container. during shutdown.#
#1.#525400C50A02003500000003000030590004B59E6928B0AE#1325591880577#com.sap.engine.core.service630.container.ServiceStopper##com.sap.engine.core.service630.container.ServiceStopper.ServiceStopper.run#######SAPEngine_System_Thread[impl:5]_71##0#0#Error#1#/System/Server#Plain###Failed to access Web Dynpro container.#
#1.#525400C50A02003500000004000030590004B59E6928B0FB#1325591880577#com.sap.engine.core.service630.container.ServiceStopper##com.sap.engine.core.service630.container.ServiceStopper.ServiceStopper.run#######SAPEngine_System_Thread[impl:5]_71##0#0#Error##Plain###com.sap.tc.webdynpro.services.exceptions.WDRuntimeException: Failed to access Web Dynpro container.#
#1.#525400C50A02003500000005000030590004B59E6928B146#1325591880577#com.sap.engine.core.service630.container.ServiceStopper##com.sap.engine.core.service630.container.ServiceStopper.ServiceStopper.run#######SAPEngine_System_Thread[impl:5]_71##0#0#Error##Plain###com.sap.tc.webdynpro.services.exceptions.WDRuntimeException: Failed to access Web Dynpro container.
        at com.sap.tc.webdynpro.serverimpl.wdc.deployment.DOContainerHook.stop(DOContainerHook.java:76)
        at com.sap.engine.services.webdynpro.WebDynproFrame.stopInternal(WebDynproFrame.java:218)
        at com.sap.engine.services.webdynpro.WebDynproFrame.stop(WebDynproFrame.java:202)
        at com.sap.engine.core.service630.container.ServiceStopper.run(ServiceStopper.java:31)
        at com.sap.engine.frame.core.thread.Task.run(Task.java:64)
        at com.sap.engine.core.thread.impl5.SingleThread.execute(SingleThread.java:81)
        at com.sap.engine.core.thread.impl5.SingleThread.run(SingleThread.java:152)
Caused by: java.lang.NullPointerException: while trying to invoke the method com.sap.tc.webdynpro.spi.IWebDynproRuntimeService.removeDOStateListener(com.sap.tc.webdynpro.spi.IDOStateListener) of an object returned from com.sap.tc.webdynpro.serverimpl.wdc.ContainerUtils.getWebDynproRuntimeService()
        at com.sap.tc.webdynpro.serverimpl.wdc.deployment.DOContainerHook.stop(DOContainerHook.java:73)
        ... 6 more
#1.#525400C50A0200730000004D000030590004B59E69406FC0#1325591882133#com.sap.engine.core.thread.impl5.ThreadManagerImpl##com.sap.engine.core.thread.impl5.ThreadManagerImpl#J2EE_GUEST#0#####Thread[Thread-88,5,main]##0#0#Error##Plain###Unexpected thread activity after interrupt() is executed in shutdown of SAPEngine_System_Thread[impl:5]_ThreadManager:
Thread[SAPEngine_System_Thread[impl:5]_50]
Task: com.sap.engine.core.thread.impl5.ActionObject - Processing Task [classname: com.sap.jms.client.connection.AsyncCloser | toString: com.sap.jms.client.connection.AsyncCloser@38134991] with classloader [[email protected]04dae@common:library:com.sap.security.api.sda;library:com.sap.security.core.sda;library:security.class;library:webservices_lib;service:adminadapter;service:basicadmin;service:com.sap.security.core.ume.service;service:configuration;service:connector;service:dbpool;service:deploy;service:jmx;service:jmx_notification;service:keystore;service:security;service:userstore]#
#1.#525400C50A0200730000004E000030590004B59E694070DF#1325591882133#com.sap.engine.core.thread.impl5.ThreadManagerImpl##com.sap.engine.core.thread.impl5.ThreadManagerImpl#J2EE_GUEST#0#####Thread[Thread-88,5,main]##0#0#Error##Plain###Unexpected thread activity after interrupt() is executed in shutdown of SAPEngine_System_Thread[impl:5]_ThreadManager:
Thread[SAPEngine_System_Thread[impl:5]_58]
Task: com.sap.engine.core.thread.impl5.ActionObject - Processing Task [classname: com.sap.engine.services.log_configurator.archive.ArchivingThread | toString: [email protected]7a42eb59] with classloader [[email protected]6e4c@service:log_configurator]#
=======================================
server.0.log -
>
#1.#525400C50A02007300000047000030590004B59E6935A059#1325591881424#/System/Server##com.sap.engine.core.service630.container.MemoryContainer#J2EE_GUEST#0#####Thread[Thread-88,5,main]##0#0#Info#1#com.sap.engine.core.service630.container.MemoryContainer#Plain###Service log_configurator stopped. (0 ms)#
#1.#525400C50A02007300000048000030590004B59E6935A4CB#1325591881426#/System/Server##com.sap.engine.core.service630.container.MemoryContainer#J2EE_GUEST#0#####Thread[Thread-88,5,main]##0#0#Info#1#com.sap.engine.core.service630.container.MemoryContainer#Plain###Service jmx_notification stopped. (0 ms)#
#1.#525400C50A02007300000049000030590004B59E6935A708#1325591881426#/System/Server##com.sap.engine.core.service630.container.MemoryContainer#J2EE_GUEST#0#####Thread[Thread-88,5,main]##0#0#Info#1#com.sap.engine.core.service630.container.MemoryContainer#Plain###Service runtimeinfo stopped. (0 ms)#
#1.#525400C50A0200730000004A000030590004B59E6938A570#1325591881622#/System/Server##com.sap.engine.core.configuration#J2EE_GUEST#0#####Thread[Thread-88,5,main]##0#0#Info#1#com.sap.engine.core.configuration#Java### stopped successfully#1#ConfigurationManager#
#1.#525400C50A0200730000004B000030590004B59E6938A94D#1325591881623#/System/Server##com.sap.engine.core.locking.AbstractLockingManagerImpl.removeAllLokcsForClusterIdLogException(clusterId)#J2EE_GUEST#0#####Thread[Thread-88,5,main]##0#0#Info#1#com.sap.engine.core.locking.AbstractLockingManagerImpl#Java###All locks for cluster-element removed successfully#1#18989150#
#1.#525400C50A0200730000004C000030590004B59E6938A9CE#1325591881623#/System/Server##com.sap.engine.core.locking.AbstractLockingManagerImpl.shutDown(properties)#J2EE_GUEST#0#####Thread[Thread-88,5,main]##0#0#Info#1#com.sap.engine.core.locking.AbstractLockingManagerImpl#Java### stopped successfully#1#LockingManager#
#1.#525400C50A02007700000000000030590004B59E6938ABA6#1325591881624#/System/Server##com.sap.engine.core.cluster.impl6.ms.MSListenerQueue.run()#######SAP J2EE Engine|MS Queue Listener##0#0#Info#1#com.sap.engine.core.cluster.impl6.ms.MSListenerQueue#Plain###MSLib: Received error command to stop listener queue.#
#1.#525400C50A0200730000004F000030590004B59E69451A50#1325591882439#/System/Server##com.sap.engine.core.thread.impl3.ThreadManagerImpl#J2EE_GUEST#0#####Thread[Thread-88,5,main]##0#0#Info#1#com.sap.engine.core.thread.impl3.ThreadManagerImpl#Plain###ThreadManager stopped.#
==============================
security.0.log -
>
{(java.lang.RuntimePermission queuePrintJob)(java.lang.RuntimePermission stopThread)(java.lang.RuntimePermission loadLibrary)}
{(java.net.SocketPermission * connect,resolve)(java.net.SocketPermission localhost:1024- listen,resolve)}
{(java.io.FilePermission * read,write)}
{(java.util.PropertyPermission java.specification.vendor read)(java.util.PropertyPermission java.specification.version read)(java.util.PropertyPermission java.vm.specification.name read)(java.util.PropertyPermission java.vendor read)(java.util.PropertyPermission file.separator read)(java.util.PropertyPermission java.version read)(java.util.PropertyPermission java.class.version read)(java.util.PropertyPermission os.arch read)(java.util.PropertyPermission os.version read)(java.util.PropertyPermission java.specification.name read)(java.util.PropertyPermission path.separator read)(java.util.PropertyPermission java.vm.vendor read)(java.util.PropertyPermission os.name read)(java.util.PropertyPermission * read)(java.util.PropertyPermission java.vm.name read)(java.util.PropertyPermission java.vendor.url read)(java.util.PropertyPermission java.vm.specification.vendor read)(java.util.PropertyPermission java.vm.version read)(java.util.PropertyPermission java.vm.specification.version read)(java.util.PropertyPermission line.separator read)}
#1.#525400C50A02002E00000003000030590004B59E6902C1C0#1325591878091#/System/Security/VSI##com.sap.security.core.server.vsi.service.VSIServiceFrame.stop()####n/a##2d9cc9b0360211e1975e525400c50a02#SAPEngine_System_Thread[impl:5]_34##0#0#Info#1#com.sap.security.core.server.vsi.service.VSIServiceFrame#Java###"Virus Scan Provider" service stopped.##
#1.#525400C50A02000800000001000030590004B59E69356481#1325591881409#/System/Security##com.sap.engine.services.userstore#######SAPEngine_System_Thread[impl:5]_70##0#0#Info#1#com.sap.engine.services.userstore#Plain###Service userstore stopped OK#
I may please be guided.
Kindest Regards
SAP BASIS

Hello Sonia,
Can you ask your network team to monitor the traffic between primary and virtual host when you try to start java i.e STARTING_APP as it tries for 20mins and stopped.
I had the similar issue but with App server.Its almost the similar condition.Our network team managed to open some ports and removed the firewall.
After that issue got resolved..
Hope it helps
Regards,
Amit Barnawal

I seen Java ?

Jan 28
I was going to download Air and I seen Java - Is Adobe Air, Flash Player and Shockwave void of the Java Virus and Java Infection ? But is Java script the Java with the Problem or Java scipt prograimmg ? I wonder because I had problems downloading Abode products - it kept stalling displaying "timed out".
Thanks,
Darren D.
[ edited by forum host - email address removed ]

Adobe does not use Oracle's Java. AIR and Flash use their own virtual machine. Your download issues are another matter, but you did not provide any detailed information, so I'm afraid this si not going anywhere. Simply try anotehr browser and use this:
Flash Player enterprise deployment
Mylenium

Why Mono?

Why the hell is the OSS community so fast to embrace C#? Seriously, why not use GCJ, Java-Gnome, etc.? There's already at least one C# virus out there already, and no Java viruses. Java's already well established as a safe high-level language. C#, on the other hand, comes from a company infamous for caring nothing at all about security or stability. Seriously, which one do you think should be used?
And while we're at it, I might as well as add that programs written using using C# and Mono are sloooowwwww...
[/rant]

I agree - way too many people are digging into the C# world. I work in the .NET platform, and have done so for about 5-6 years now (I was working in it while 1.0 was still beta). Personally, I feel it is too restrictive, and a bit clunky. I really don't like certain things, like delegates, for instance, but that's mainly due to the fact that, at heart, I'm a C++ guy, and the "delegate" issue is solved so much more elegantly in C++ with generic programming:
template <typename DelegateType>
void call_delegate(DelegateType& delegate)
delegate(12,"hello",2.3); //calls DelegateType(int,const char*, float);
Now of course I've neglected some code as this isn't a real delegate, but I wanted to illustrate a point - use a template, you can pass anything you want to "call_delegate", including a class instance, or a function pointer. The compiler will attempt to compile the (12,"hello",2.3) call however it can and if the function params are off, or the class does not support the proper operator()(int,const char*,double) call, compilation fails.
But I'm running around the point here - I think most people latch on to C# for the following reasons:
Many people in the linux world have had touch-and-go C/C++ experience, and have seen gcc errors, and have looked at patches, and seen the source. However, not having experience in something like that, it is hard to pick up. There's alot of nuances to these two which you don't get elsewhere (null references, dangling points, seg faults, memory leaks, etc). When one of these people comes across C#, they see similar syntax to what they're used to, along with none of the "flaws" (I'll hold my tounge here....). Admittedly, Java is the same. However, I seriously think that having "C" in the name draws people to it, along with the fact that, about 5 years ago, java was considered "slow" (it is not slow anymore, but the VM still uses alot of RAM, but then again, python eats up more ram than X for me).
HIJACK!
cactus wrote:No matter how much you polish a turd, it's still a turd
I personally like:
"You don't have to eat the whole turd to know it's not a crab cake" - Orson Scott Card, Ender's Shadow

Resetting MacBook Air to factory settings

Hi,
I wish to reset my MacBook Air to its original factory settings as I cannot get rid of this Java 3.16 update virus that stops me from streaming videos online. I have already copied all my files to an external hard drive, so am not worried about losing anything. I do not appear to have any backups on my Time Machine, so this doesn't seem to be an option for me either. Please advise in plain english how to proceed as I only have a basic understanding of Mac systems.
Thanks

Why do you think you have a Java virus? Before doing an erase and reinstall, you might try going to Thomas Reed's site, http://www.thesafemac.com and check out his information on Java and problems you are having. If that does not help, then erasing and reinstalling will definitely clean things up.
To 'reset to factory settings' you must erase the internal storage and reinstall Mac OS X and your applications.
What version of Mac OS X did your MacBook Air come with, was it Yosemite as noted in your information bar?
If it was Yosemite, you can restart the MBA and hold the Command and R keys, that will startup on the Recovery HD, a hidden partition on the machine. Then select the Utilities drop down and then Disk Utility.
Highlight the internal storage, MacIntosh HD, in the left panel of the Disk Utility window, and then Erase. That will remove the information on the storage.
Then quit Disk Utility and select Install Mac OS X from the utilities drop down and that will reinstall Yosemite. After that you will have to restore your applications from your backup copies. But, be careful what you reinstall so you do not reinstall the problem software.

Installation restarts computer at 70%

have a fresh install of windows xp sp3. finished up with all updates and hardware drivers. went to install adobe products, java, virus, etc., and the only thing i have issues with is adobe reader installation. hangs or restarts the computer at 70% everytime. appreciate any advice.

that error had to do with extracting of the files. once i downloaded the msi versions, things were fine. luckily it gave me that error so i could figure out i just needed the msi one. adobe updated itself and i'm up to date on that computer, but still confused why that one comp had just that one issue with adobe and nothing else. thanks for your help
http://forums.adobe.com/message/3497659
josh

I have a Java/CVE-2010-94 virus on my macbook pro. Can Someone help me fix this?

I used Virus Barrier Express that I downloaded from the App Store and it found a virus named Java/CVE-2010-94. I ran Virus Barrier Express again after I prssed the "fixed it" button; however, i'm not sure if this virus or any other virus is still on my MacBook Pro. Can someone please help me know if i'm safe to use my Mac?
*The first sign of any type of virus was when I was on a website and my screen froze. I couldn't move anything or press anything. Something popped up and told me to turn off the Mac. I had no choice and I did turn it off. I used my Virus Barrier Express to scan any viruses, but nothing appeared. It only appeared after I downloaded new updates yesterday.
*I just did some research and it turned out to be a "kernel Panic". http://support.apple.com/kb/TS3742 I haven't encountered another one ever since so does that mean my Mac is safe now?

Steven --
Get rid of the VirusBarrier Express. At this time, there are no Mac viruses. All you're doing with that thing is slowing down your Mac. Look in your VBE folder, to see if there's an UNinstaller. I don't know why Apple is making these things available. They're garbage, 98% of them. Two good ones are ClamXav and Sophos. But still, IMHO, they are unnecessary.
Kernel Panics, on the other hand, are serious. If you don't have any more of them, that's good. If you have any more of them, come back and post your Panic report here.
Here's info on this virus, which should affect only PCs.
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Exp loit%3AJava%2FCVE-2010-0094.AA
But the have some great advice to avoid malware:
Take the following steps to help prevent infection on your computer:
Enable a firewall on your computer.
Get the latest computer updates for all your installed software.
Use up-to-date antivirus software.
Limit user privileges on the computer.
Use caution when opening attachments and accepting file transfers.
Use caution when clicking on links to web pages.
Avoid downloading pirated software.
Protect yourself against social engineering attacks.
Use strong passwords.

Java Virus?

Similar Messages

Maybe you are looking for