ESS scan and several threats that point to JAVA

Any one else run into this?

C:\Documents and Settings\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13\2373b34d-59a8ef3c a variant of Java/TrojanDownloader.OpenStream.NBF trojan No action
C:\Documents and Settings\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\7845b2d2-135d7368 a variant of Java/TrojanDownloader.Agent.NAN trojan No action
C:\Documents and Settings\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19\79571f53-40ae0348 probably a variant of Win32/Agent.FQRCZBA trojan No action
C:\Documents and Settings\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\71c5d114-51dd729a multiple threats No action
C:\Documents and Settings\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\77ab98d6-48f3f73a Java/TrojanDownloader.Agent.NBB trojan No action
C:\Documents and Settings\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\4ec49a58-6de5ff04 Java/Agent.BV trojan No action
C:\Documents and Settings\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\3545009a-370ebbdc Java/TrojanDownloader.Agent.JX trojan No action
C:\Documents and Settings\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\1659a8c3-3350fd90 a variant of Java/TrojanDownloader.OpenStream.NBF trojan No action
C:\Documents and Settings\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\5a06ad27-2f06950e multiple threats No action
C:\Documents and Settings\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4\53924d84-24eca9bf multiple threats No action
C:\Documents and Settings\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\4b361974-4e48bbaf multiple threats No action
C:\Documents and Settings\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\5512bf5-3169bbd5 multiple threats No action
C:\Documents and Settings\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\2cd50f76-5df21a67 Java/Agent.BV trojan No action
C:\Documents and Settings\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\30ee3746-5d7b9084 probably a variant of Java/Agent.BR trojan No action
C:\Users\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13\2373b34d-59a8ef3c a variant of Java/TrojanDownloader.OpenStream.NBF trojan No action
C:\Users\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\7845b2d2-135d7368 a variant of Java/TrojanDownloader.Agent.NAN trojan No action
C:\Users\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19\79571f53-40ae0348 probably a variant of Win32/Agent.FQRCZBA trojan No action
C:\Users\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\71c5d114-51dd729a multiple threats No action
C:\Users\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\77ab98d6-48f3f73a Java/TrojanDownloader.Agent.NBB trojan No action
C:\Users\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\4ec49a58-6de5ff04 Java/Agent.BV trojan No action
C:\Users\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\3545009a-370ebbdc Java/TrojanDownloader.Agent.JX trojan No action
C:\Users\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\1659a8c3-3350fd90 a variant of Java/TrojanDownloader.OpenStream.NBF trojan No action
C:\Users\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\5a06ad27-2f06950e multiple threats No action
C:\Users\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4\53924d84-24eca9bf multiple threats No action
C:\Users\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\4b361974-4e48bbaf multiple threats No action
C:\Users\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\5512bf5-3169bbd5 multiple threats No action
C:\Users\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\2cd50f76-5df21a67 Java/Agent.BV trojan No action
C:\Users\Scott\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\30ee3746-5d7b9084 probably a variant of Java/Agent.BR trojan No action

 

Hello,

Back in March there was a false positive with a Java update. What Virus Signature Database does the computer have? Is it possible the VSD is out of date?

Thanks,

Matt

 

It's highly unlikely they are false positives.

 

there was a java update last week, I think it fixed 17 security holes (update26)

 

I'll be back on my desktop shortly to check it out. I would imagine my laptop would show the same results but I want to check to see VSD on the desktop where these results came from.

Marcos: are you saying ESET found real problems masked as Java?

 

It's version 6198.

 

"Marcos: are you saying ESET found real problems masked as Java?"
I think I am correct in saying the infection is in the cache, so it's been downloaded.

 

If you have doubts if a particular file is actually malicious or FP submit it to ESET as per the instructions here. Also uploading it to VirusTotal would show how many other vendors detect it (note that the results will only give an indication about the file's reputation but will not tell for sure if it's clean or malicious).

 

I get hits like that on my home PC occasionally but (thankfully) not quite that bad. I always assumed it was malicious applets trying to sneak into my system.

 

Current VSD is 6200 as of this morning.

So, sounds like the recommendation is to run Eset again and let it clean up the Java that's throwing the flag.

But MattJN said there was a False Positive.

Confused !

 

*bump*

 

Advice was already given in my previous post, there's nothing else I could add.

 

Soo..rescan and remove what it finds which everything in the first post. Yet, ESS had a false positive with Java that was reported? You said it was highly unlikely.

I'm fact finding. What I'm seeing here is maybe/maybe not so I'm not clear.

 

send a copy to virus total for file reputation and then a copy to eset laboratories for file analysis