Antivir false positive with java

Hi,

Long time lurker, first time poster. Just wanted to first say that Wilders is an awesome place to find info/help on security-related issues. Keep up the great work!

Now for my question: does antivir classic edition give false positive with Java RE 6? I keep getting pop-ups saying that some Java-related files are trojan downloaders. (I even uninstalled and downloaded new version of Java RE 6 update 10). Thanks.

 

Very well may not be a false positive. Older versions have vulnerabilities that malware can use to infect your system.
I would do a uninstall and fresh reinstall of the latest version.

 

I have Antivir classic with Java version 5 and I haven't ever seen that before with downloading Java applets. Is the message regarding the files within your Java program folder or is it with websites that use Java?

 

you're sure that these files are java related or only located in the java tempfolder.?

 

Hi,

Yes, it seems one of them was in temp folder. I usually get 4 popups with similar file names. I've included screenshots in the attachments (don't know how to insert image )

 

yes these files are tempfiles. please clean your java cache and they should be gone.
and please make sure you're java version is up to date.

 

Thanks! Will do....

 

Hi again,

So I cleared browser cache and java cache (via console) then uninstalled then installed via firefox plugin (JRE 6 update 3). The problem is that whenever I load my applet, it puts a .tmp file in the C:\Documents and Settings\user\Local Settings\Temp folder that flags it as a trojan. The applet I'm loading is IBM Global Expense Reporting Solutions. Can I assume this is FP still? Thanks.

 

Ok, thanks for everyone's help...

 

Most likely, yes. What's your heuristics level settings? Do what Ronjor said above.

 

Only set to medium which is why I was bit surprised...

 

Got one similar FP with js (heur. at medium sett.) sometime ago when i trialed antivir pe premium. Sent the file to the lab and they confirmed its harmlessness.

 

well the newest version ist update 4
i have testet the site on your screenshot and i does not get any warning. but i'm using v8 so could be because of that.

 

I get the alerts from Avira 7 at that site.

 

FWIW, java se update 5 was released yesterday. link

 

Thanks for the link

 

You're most welcome

 

Uninstall all Java versions in add or remove programs, Run CCleaner, now install JRE v6 u5.

 

Is false positive confirmed? I did send them a detected file and it was clean.
Not sure if they fixed it or not.

 

I sent them the files as well and it came back clean.

Installed Java RE 6 update 5 and no longer gives me the popup