-
Bug
-
Resolution: Not an Issue
-
P2
-
None
-
6u11
-
x86
-
windows_xp
A number of reports have come in, saying that their anti virus software has found the "W32/Trojan3.UJ" virus in the 6u11 javaw.exe
The scanners that have found the virus include: IOLO anti-virus, CA antivirus, Qwest Security Software, Bell, Virgin F-Prot, PCguard, and Kaspersky. There is an attached screenshot from the Bell anti-virus software.
There are two possibilities:
1) There is a virus, and we need to remove it.
2) This is a 'false positive'. We then need to contact the virus software companies and have them correct the false positive in their software. We will also need to write a help page to be posted on java.com, asap.
From Nelson:
Could be a 'false positive'. Here's a post from a forum of the F-Prot antivirus - http://forum.f-prot.com/index.php?topic=1331.msg7615#msg7615 that references the complaints from users about the problem with W32/Trojan3.UY .
In response to this thread, the F-Prot staff have posted - "We are releasing fix for this problem."
Most sites, show the "W32/Trojan3.UY" signature added in the last week, we can expect more reports regarding this in the coming days as users update their virus signatures.
----------------------------------------------------
http://forum.f-prot.com/index.php?topic=1331.msg7615#msg7615
The posting on 2009-01-12, 11:15:19 by Felix Atagong indicates that this problem has been fixed. I assume this means that F-Prot is no longer falsely identifying javaw.exe as containing the virus.
The scanners that have found the virus include: IOLO anti-virus, CA antivirus, Qwest Security Software, Bell, Virgin F-Prot, PCguard, and Kaspersky. There is an attached screenshot from the Bell anti-virus software.
There are two possibilities:
1) There is a virus, and we need to remove it.
2) This is a 'false positive'. We then need to contact the virus software companies and have them correct the false positive in their software. We will also need to write a help page to be posted on java.com, asap.
From Nelson:
Could be a 'false positive'. Here's a post from a forum of the F-Prot antivirus - http://forum.f-prot.com/index.php?topic=1331.msg7615#msg7615 that references the complaints from users about the problem with W32/Trojan3.UY .
In response to this thread, the F-Prot staff have posted - "We are releasing fix for this problem."
Most sites, show the "W32/Trojan3.UY" signature added in the last week, we can expect more reports regarding this in the coming days as users update their virus signatures.
----------------------------------------------------
http://forum.f-prot.com/index.php?topic=1331.msg7615#msg7615
The posting on 2009-01-12, 11:15:19 by Felix Atagong indicates that this problem has been fixed. I assume this means that F-Prot is no longer falsely identifying javaw.exe as containing the virus.