You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@openoffice.apache.org by iu...@alice.it on 2012/09/01 13:42:53 UTC
Trojan horse whith Java download
C:\Documents and Settings\Maxim\Dati applicazioni\Sun\Java\Deployment\cache\6.0\7\5bc23b47-569827b8 = ZIP = hfdymuqcqdjsepayw/anmdrybvyqjttr.class - Java/Exploit.Agent.NCT trojan horse
Eset nod 32 has found this file.
Why?
Massimo Passalacqua
Re: Trojan horse whith Java download
Posted by Andrea Pescetti <pe...@apache.org>.
On 01/09/2012 iurlarofashion@alice.it wrote:
> C:\Documents and Settings\Maxim\Dati applicazioni\Sun\Java\Deployment\cache\6.0\7\5bc23b47-569827b8 = ZIP = hfdymuqcqdjsepayw/anmdrybvyqjttr.class - Java/Exploit.Agent.NCT trojan horse
> Eset nod 32 has found this file.
> Why?
> Massimo Passalacqua
Whatever this is, this is not an OpenOffice file or an OpenOffice
folder: OpenOffice uses Java if available, but it doesn't seem that your
problem is related to OpenOffice, or at least I can't recognize it as
such. I think we cannot be of any help, unfortunately.
Regards,
Andrea.
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
Re: Trojan horse whith Java download
Posted by "David H. Lipman" <DL...@Verizon.Net>.
From: <iu...@alice.it>
> C:\Documents and Settings\Maxim\Dati
> applicazioni\Sun\Java\Deployment\cache\6.0\7\5bc23b47-569827b8 = ZIP =
> hfdymuqcqdjsepayw/anmdrybvyqjttr.class - Java/Exploit.Agent.NCT trojan
> horse Eset nod 32
> has found this file. Why?
> Massimo Passalacqua
That is in the Cache. It is not directly attributed to a Java Jar or .CLASS
file in an AOO folder or other software related location.
Chances are you visited a BlackHole Exploit site, without your knowledge,
and thus the exploit was placed in the Java cache.
AOO may use Oracle Java but is NOT employing Exploit code and you have
provided zero evidence to tie what's in the Java Cache to AOO.
--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org
Re: Trojan horse whith Java download
Posted by Fernando Cassia <fc...@gmail.com>.
On Sat, Sep 1, 2012 at 8:42 AM, <iu...@alice.it> wrote:
> C:\Documents and Settings\Maxim\Dati applicazioni\Sun\Java\Deployment\cache\6.0\7\5bc23b47-569827b8 = ZIP = hfdymuqcqdjsepayw/anmdrybvyqjttr.class - Java/Exploit.Agent.NCT trojan horse
> Eset nod 32 has found this file.
> Why?
> Massimo Passalacqua
Massimo,
Like others explained to you, the Java cache folder is NOT related to
open office, it is, as it name implies, a "cache" folder where the
Java VM stores data temporarily usually as a result of JAVA APPLETS
(run inside a web browser).
Thus, since your anti-virus already has detected such file, let it
erase it, and continue with your business as usual.
Oh, and you might want to update your Java version to 1.7 update 7
(Java7u7) downloaded from www.java.com, it was released in the last 48
hrs and fixes some security issues. That will likely prevent stuff
like that from happening again while you do your web browsing on
unsafe sites...
FC
--
During times of Universal Deceit, telling the truth becomes a revolutionary act
Durante épocas de Engaño Universal, decir la verdad se convierte en un
Acto Revolucionario
- George Orwell
---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org