Author Topic: Java update / jucheck.exe  (Read 6350 times)

0 Members and 1 Guest are viewing this topic.

Riddley

  • Guest
Java update / jucheck.exe
« on: February 21, 2013, 12:20:16 PM »
I keep getting a pop-up from jucheck.exe (C:\Program Files (x86)\Common Files\Java\Java Update) for updating my java. The issue is that AVAST keeps detecting malware-gen32 issues when doing so. Scanning the exe file with avast indicates the files is clean.

I decided to just bypass the autoupdate and get the newest version of java from http://www.java.com/en/download/windows_xpi.jsp?locale=en, however when attempting to download, AVAST gives an alert listing a file as malware. A windows screen then pops up stating "AppData\Local\Temp\xRwTBONy.exe.part could not be saved, because the source file could not be read."

Can someone help?

Offline NON

  • Japanese User
  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5475
  • Whatever will be, will be.
Re: Java update / jucheck.exe
« Reply #1 on: February 21, 2013, 01:08:00 PM »
Confirmed, Java online installer is detected as Malware-gen.
Installer itself (downloaded with avast disabled) is not detected. Must be a false positive. :(

Jotti Malware Scan:
http://virusscan.jotti.org/en/scanresult/cbe52e198b9882fedeb00cd9149c851be7fdf313
Desktop: Win10 Pro 22H2 64bit / Core i5-7400 3.0GHz / 32GB RAM / Avast 23 Premium Beta(Icarus) / Comodo Firewall
Notebook: Win10 Pro 22H2 64bit / Core i5-3340M 2.7GHz / 12GB RAM / Avast 23 Free / Windows Firewall Control
Server: Win11 Pro 23H2 64bit / Core i3-4010U 1.7GHz / 12GB RAM / Avast One 23 Essential

Avast の設定について解説しています。よろしければご覧ください。

Theo Peterbroers

  • Guest
Re: Java update / jucheck.exe
« Reply #2 on: February 21, 2013, 01:29:38 PM »
Manually installing from java.com results in detection by webshield, see screen capture.

In a previous attempt, fileshield detected BIT2.tmp in my temp directory. According to its log |>UPX threat Wi32:Malware-gen Moved to chest.

Must be something with the filepacker (UPX).

Best regards

EDIT Oehh.., sig is not up to date. O well.
« Last Edit: February 21, 2013, 01:32:48 PM by Kwartet! »

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2293
Re: Java update / jucheck.exe
« Reply #3 on: February 21, 2013, 03:11:24 PM »
Hello,
thanks for notice, it should be fixed by stream update.

Milos