java problem and more - Page 4

SeaWolf U-57 · 09-30-10, 08:59 AM

As you see Nod32 did this for me
I wont ever have this problem again

Gerald · 09-30-10, 09:05 AM

Good news,

Dowly · 09-30-10, 09:13 AM

Avast recognizes the trojan too, just went to the site mentioned (yes, I'm a bit nutty) and Avast started yelling "Avast! There be a scurvy man-o-war off yar starboard bow!" and aborted the connection.

Onkel Neal · 09-30-10, 09:42 AM

OK, I have edited a piece of code that may have been causing this problem.

From this point in time forward, let me know here if this problem pops up. Details are helpful, thanks a buinch, guys.

Rhodes · 09-30-10, 12:32 PM

I was wondering were this thread had gone...

But when replying to a pm I got the same warning again.
30-09-2010 18:18:39 HTTP filter file http://drejrre.co.cc/1.zip a variant of Java/Mugademel.A trojan connection terminated - quarantined RHODES\Administrador Threat was detected upon access to web by the application: C:\Programas\Java\jre6\bin\java.exe.

and

Emsisoft Anti-Malware - Version 5.0
IDS log
Date PID Source Event Behavior/Infection
30-09-2010 18:18:51 0 C:\DOCUMENTS AND SETTINGS\ADMINISTRADOR\DEFINIçõES LOCAIS\TEMP\JAR_CACHE7195392806923462976.TMP Quarantined by User Trojan-Downloader.Java.Agent!IK
30-09-2010 18:18:40 0 C:\DOCUMENTS AND SETTINGS\ADMINISTRADOR\DEFINIçõES LOCAIS\TEMP\JAR_CACHE1712967037496492837.TMP Quarantined by User Trojan-Downloader.Java.Agent!IK

I begining to think that my XP (or my AV/anti-malware software) does not like subsim...

Gerald · 09-30-10, 12:42 PM

I had attempted attack itself discovered now, but web scanning of network traffic was such that there, not was a problem no more

Rhodes · 09-30-10, 12:58 PM

They are out there.... (X-files theme music now)

Gerald · 09-30-10, 01:08 PM

Hmmm, yes it seems to be a lot of beer until the matter is investigated

Rhodes · 10-01-10, 04:59 AM

Quote:

Originally Posted by Vendor

Hmmm, yes it seems to be a lot of beer until the matter is investigated

Indeed! Every first time that I log in to subsim, the bugger tries to get in.

SeaWolf U-57 · 10-01-10, 08:21 AM

Have you cleared your recent history including your cookies

Rhodes · 10-01-10, 09:54 AM

Quote:

Originally Posted by SeaWolf U-57

Have you cleared your recent history including your cookies

Yes and it happens every time I connect for the first time in the day to subsim. Then after the block by the anti-virus, I do not have any messages again!

Onkel Neal · 10-01-10, 06:14 PM

Is anyone else seeing this? My AV is not making a peep now.

JScones · 10-01-10, 06:41 PM

I'm not getting it now. Did your security guy find a problem?

KeineK · 10-01-10, 08:06 PM

Yes, I just had my AV pop up again.

stringy · 10-02-10, 01:53 AM

I had the same problem with Avast giving me malicious threat warnings when entering the site but all seems well now. No issues for the last couple of days. Looks like Subsims pest control cracked this one

.

09-30-10, 09:05 AM	#47
Gerald SUBSIM Newsman Join Date: May 2008 Location: Close to sea Posts: 24,254 Downloads: 553 Uploads: 0	Good news, __________________ Nothing in life is to be feard,it is only to be understood. Marie Curie

09-30-10, 09:42 AM	#49
Onkel Neal Born to Run Silent Join Date: Jan 1997 Location: Cougar Trap, Texas Posts: 21,383 Downloads: 541 Uploads: 224	OK, I have edited a piece of code that may have been causing this problem. From this point in time forward, let me know here if this problem pops up. Details are helpful, thanks a buinch, guys. __________________ SUBSIM - 26 Years on the Web

09-30-10, 12:32 PM	#50
Rhodes Silent Hunter Join Date: Aug 2005 Location: Figueira da Foz, Portugal Posts: 4,515 Downloads: 110 Uploads: 0	I was wondering were this thread had gone... But when replying to a pm I got the same warning again. 30-09-2010 18:18:39 HTTP filter file http://drejrre.co.cc/1.zip a variant of Java/Mugademel.A trojan connection terminated - quarantined RHODES\Administrador Threat was detected upon access to web by the application: C:\Programas\Java\jre6\bin\java.exe. and Emsisoft Anti-Malware - Version 5.0 IDS log Date PID Source Event Behavior/Infection 30-09-2010 18:18:51 0 C:\DOCUMENTS AND SETTINGS\ADMINISTRADOR\DEFINIçõES LOCAIS\TEMP\JAR_CACHE7195392806923462976.TMP Quarantined by User Trojan-Downloader.Java.Agent!IK 30-09-2010 18:18:40 0 C:\DOCUMENTS AND SETTINGS\ADMINISTRADOR\DEFINIçõES LOCAIS\TEMP\JAR_CACHE1712967037496492837.TMP Quarantined by User Trojan-Downloader.Java.Agent!IK I begining to think that my XP (or my AV/anti-malware software) does not like subsim... __________________ http://www.flickr.com/photos/16416646@N05/

09-30-10, 12:42 PM	#51
Gerald SUBSIM Newsman Join Date: May 2008 Location: Close to sea Posts: 24,254 Downloads: 553 Uploads: 0	I had attempted attack itself discovered now, but web scanning of network traffic was such that there, not was a problem no more __________________ Nothing in life is to be feard,it is only to be understood. Marie Curie

09-30-10, 12:58 PM	#52
Rhodes Silent Hunter Join Date: Aug 2005 Location: Figueira da Foz, Portugal Posts: 4,515 Downloads: 110 Uploads: 0	They are out there.... (X-files theme music now) __________________ http://www.flickr.com/photos/16416646@N05/

09-30-10, 08:59 AM	#46
SeaWolf U-57 Ace of the Deep Join Date: May 2008 Posts: 1,231 Downloads: 92 Uploads: 0	As you see Nod32 did this for me I wont ever have this problem again

09-30-10, 09:13 AM	#48
Dowly Lucky Jack Join Date: Apr 2005 Location: Finland Posts: 25,052 Downloads: 32 Uploads: 0	Avast recognizes the trojan too, just went to the site mentioned (yes, I'm a bit nutty) and Avast started yelling "Avast! There be a scurvy man-o-war off yar starboard bow!" and aborted the connection.

09-30-10, 01:08 PM	#53
Gerald SUBSIM Newsman Join Date: May 2008 Location: Close to sea Posts: 24,254 Downloads: 553 Uploads: 0	Hmmm, yes it seems to be a lot of beer until the matter is investigated __________________ Nothing in life is to be feard,it is only to be understood. Marie Curie

10-01-10, 08:21 AM	#55
SeaWolf U-57 Ace of the Deep Join Date: May 2008 Posts: 1,231 Downloads: 92 Uploads: 0	Have you cleared your recent history including your cookies

10-01-10, 06:14 PM	#57
Onkel Neal Born to Run Silent Join Date: Jan 1997 Location: Cougar Trap, Texas Posts: 21,383 Downloads: 541 Uploads: 224	Is anyone else seeing this? My AV is not making a peep now. __________________ SUBSIM - 26 Years on the Web

10-01-10, 06:41 PM	#58
JScones Navy Seal Join Date: Apr 2005 Posts: 5,501 Downloads: 19 Uploads: 0	I'm not getting it now. Did your security guy find a problem?

10-01-10, 08:06 PM	#59
KeineK Swabbie Join Date: Mar 2010 Posts: 11 Downloads: 18 Uploads: 0	Yes, I just had my AV pop up again.

10-02-10, 01:53 AM	#60
stringy Swabbie Join Date: Jul 2006 Location: Demport in Jannerland Posts: 9 Downloads: 65 Uploads: 0	Clear here I had the same problem with Avast giving me malicious threat warnings when entering the site but all seems well now. No issues for the last couple of days. Looks like Subsims pest control cracked this one .