Another Microsoft exploit, newly found viruses (JAVA_BYTEVER.A/K) - GoFuckYourself.com

loverboy · 05-11-2005, 08:48 AM

my workstation is fucking slow today, tried updating my virus software and found several new viruses (JAVA_BYTEVER.A, JAVA_BYTEVER.K).

Virus name: JAVA_BYTEVER.A
Malware type: Java Applet
Aliases: Exploit-ByteVerify, Java.Shinwow.AB, Java/Shinwow.AJ.3592!Trojan, Trojan.ByteVerify, Trojan:Java/Classloader.E
Language: English
Platform: Windows 95, 98, ME, NT, 2000, XP
Encrypted: No

Description:

This malware is a component of a malicious Java archive file (JAR) that resides in a malicious Web site. Machines infected with the malware JS_FORTNIGHT.B are redirected to this Web site.

This malware calls and executes another malware, JAVA_JJBLACK.C, which results in modifications to the browser and registry settings of the infected system.

This is Trend Micro's detection for JAVA classes that exploit a known vulnerability in Microsoft Virtual Machine in Windows Operating Systems and Internet Explorer. This flaw allows malicious users to execute codes of his or her choice when a user visits an infected Web site.

http://www.trendmicro.com/vinfo/viru...JAVA_BYTEVER.A

loverboy · 05-11-2005, 09:01 AM

tried using "Malicious Software Removal Tool" at microsoft.com and i get this response:

"We are sorry, but the tool did not work properly on your computer. Please try again later, or try downloading the tool directly from the Microsoft.com Download Center. If you cannot get the tool to work, please consult your antivirus vendor for general antivirus assistance."

what a fucking joke lol

Agnosticism · 05-11-2005, 09:02 AM

That virus is 2 years old! All because you have it on your computer also doesn't automatically mean you are infected too.

loverboy · 05-11-2005, 09:23 AM

Quote:

Originally Posted by Agnosticism

That virus is 2 years old! All because you have it on your computer also doesn't automatically mean you are infected too.

successfully remove the virus and everything is working fine now.
i wonder if its only me who got infected since I regulary update my virus
def and schedule automatic update on a weekly basis.

Screaming · 05-11-2005, 09:28 AM

well that is no good

loverboy · 05-11-2005, 09:42 AM

Quote:

Originally Posted by Screaming

well that is no good

yup, this week alone, windows automatically installed a patch but was not aware of the details since i was too busy working on something. somehow i think that this exploit has to do with the patch.

i should have been protected with this virus eventhough it was 2 yrs. old since i don't miss an update from microsoft. i guess in a way it was still able to sneak into my system.. in what way? that's the big question for me.

05-11-2005, 08:48 AM	#1
loverboy When it rains, it pours Industry Role: Join Date: May 2003 Posts: 20,609	Another Microsoft exploit, newly found viruses (JAVA_BYTEVER.A/K) my workstation is fucking slow today, tried updating my virus software and found several new viruses (JAVA_BYTEVER.A, JAVA_BYTEVER.K). Virus name: JAVA_BYTEVER.A Malware type: Java Applet Aliases: Exploit-ByteVerify, Java.Shinwow.AB, Java/Shinwow.AJ.3592!Trojan, Trojan.ByteVerify, Trojan:Java/Classloader.E Language: English Platform: Windows 95, 98, ME, NT, 2000, XP Encrypted: No Description: This malware is a component of a malicious Java archive file (JAR) that resides in a malicious Web site. Machines infected with the malware JS_FORTNIGHT.B are redirected to this Web site. This malware calls and executes another malware, JAVA_JJBLACK.C, which results in modifications to the browser and registry settings of the infected system. This is Trend Micro's detection for JAVA classes that exploit a known vulnerability in Microsoft Virtual Machine in Windows Operating Systems and Internet Explorer. This flaw allows malicious users to execute codes of his or her choice when a user visits an infected Web site. http://www.trendmicro.com/vinfo/viru...JAVA_BYTEVER.A Last edited by loverboy; 05-11-2005 at 08:50 AM..

05-11-2005, 09:28 AM	#5
Screaming I can change this!!!!! Join Date: Feb 2004 Posts: 18,972	well that is no good __________________

05-11-2005, 09:01 AM	#2
loverboy When it rains, it pours Industry Role: Join Date: May 2003 Posts: 20,609	tried using "Malicious Software Removal Tool" at microsoft.com and i get this response: "We are sorry, but the tool did not work properly on your computer. Please try again later, or try downloading the tool directly from the Microsoft.com Download Center. If you cannot get the tool to work, please consult your antivirus vendor for general antivirus assistance." what a fucking joke lol

05-11-2005, 09:02 AM	#3
Agnosticism Confirmed User Join Date: Dec 2004 Posts: 100	That virus is 2 years old! All because you have it on your computer also doesn't automatically mean you are infected too.