Do I have a virus?

[Altarir.]

Thanks. I managed to download and run quick scan.  IT found a few atiems and dealet with them. I am now doing a deep scan and it found already Trojan Atrapsik (the i in sick is an inverted exclamation mark).  I googled and read elesewhere about a-squared finding this trojan but that it keeps reappearing. Any ideas what I should do?
Thank you very much
qim

You're welcome..!
If the threat couldn't be fully removed, please read/post here for further instructions:
http://support.emsisoft.com/forum/6-malware-removal-help/
asyn

why are you so sure these are threats, anyway?

a-squared still has a lot of false positives, no?

[qim]

Thank you very much.

I restarted after a2 and ran SpyBot and BitDefender without any problem and all seemed clean.  However, now I find that if I go into ControlPanel/Java and press the Update Now button, nothing happens.

I wonder if the trojan disabled Java.  What should I do? Inistall Java and reinstall?  I tried reinstalling without uninstalling and the button still does not work.

Help...!!

Thanks

qim

[Asyn]

1. why are you so sure these are threats, anyway?

Read his logs...!!
asyn

[Asyn]

Thank you very much.
I restarted after a2 and ran SpyBot and BitDefender without any problem and all seemed clean.  However, now I find that if I go into ControlPanel/Java and press the Update Now button, nothing happens.
I wonder if the trojan disabled Java.  What should I do? Inistall Java and reinstall?  I tried reinstalling without uninstalling and the button still does not work.

You're very welcome...
If possible uninstall your old java versions first.
Download the appropriate java (latest today should be 6 update 20) for your OS here:
http://www.java.com/en/download/manual.jsp?locale=en&host=www.java.com
Please post back your results.
asyn

[Altarir.]

1. why are you so sure these are threats, anyway?

Read his logs...!!
asyn

eh, mbam logs show nothin'

[Asyn]

eh, mbam logs show nothin'

Read the OTL.txt...
asyn

[13thSlayer]

eh, mbam logs show nothin'

Read the OTL.txt...
asyn

Doesn't seem suspicious to me... Hm?

[Asyn]

Doesn't seem suspicious to me... Hm?

No..?? Take a closer look...
If you can't find anything, you better post elsewhere.
asyn

[qim]

Well, I have uninstalled and reinstalled Java and all looks well, but... I still get no response when I press the 'Update Now' button.  If I remeber I should get a box saying that I am up to date (or otherwise).

Should I do another scan? Which?

qim

[Asyn]

Well, I have uninstalled and reinstalled Java and all looks well, but... I still get no response when I press the 'Update Now' button.  If I remeber I should get a box saying that I am up to date (or otherwise).

Did you restart your machine?
asyn

[qim]

No, I had not; but I have now.  Still the same.  Can you confirm that the "Update Now" button should provoke a response?

You may rercall that a2 yesterday found a trojan embeded in a Java file and sent it to quarantine.  In fact, the file is still there where it was originally.  Ithoight that by quarantining a file it got moved to another folder.

Thankjs for your help and patience.

qim

[Pondus]

No, I had not; but I have now.  Still the same.  Can you confirm that the "Update Now" button should provoke a response?

On my XP system, no response. Maybe you only get a response if not up to date ?

[Asyn]

You may rercall that a2 yesterday found a trojan embeded in a Java file and sent it to quarantine.  In fact, the file is still there where it was originally.  Ithoight that by quarantining a file it got moved to another folder.

In fact it should be moved, but maybe it's a new file with the same name from the new java install.
If you are not sure about it you can rescan your system and see if anything is found and post back.
asyn

ps: You can also check your system for old java installs with JavaRa (http://raproducts.org/javara.html)

[Asyn]

On my XP system, no response. Maybe you only get a response if not up to date ?

I think it's because of the quick fix from 6u19 to 6u20...
But i never recognized it, as i disabled java auto update.
asyn

[Altarir.]

Doesn't seem suspicious to me... Hm?

No..?? Take a closer look...
If you can't find anything, you better post elsewhere.
asyn

how about you name anything suspicious in case you can find it?