Boot time scan - virus found

[drahcir]

Hey,

1. Threat: Java:Malware-gen [Trj] Error: The system cannot find the file specified (2)
2. Threat: Java:Malware-gen [Trj] Error: The system cannot find the file specified (2)
3. Threat: Java:Agent-RM [Expl] Error: The system cannot find the file specified (2)
4. Threat: Java:Agent-RJ [Expl] Error: The system cannot find the file specified (2)
5. Threat: Java:Malware-gen [Trj] Error: The system cannot find the file specified (2)

So why is Java so messed up?
Does Trj stand for Trogan and Expl stand for exploit?
How do I get rid of these problems?
Are any of these false positives?

[Asyn]

1. So why is Java so messed up?
2. Does Trj stand for Trogan and Expl stand for exploit?
3. How do I get rid of these problems?
4. Are any of these false positives?

1. Well, it's Java. (You should always use the latest version, btw.)
2. Yes.
3. & 4. Can you provide the location where it was found..??

[drahcir]

C:\Users\drahcir\AppData\Local\Temp\...|>g6k1.class
C:Users\drahcir\AppData\Local\Temp\...|>y6u7.class
C:Users\drahcir\AppData\Local\Temp\...|>g5z6.class
C:Users\drahcir\AppData\Local\Temp\...|>main.class
C:Users\drahcir\AppData\Local\Temp\...|>q3po.class

There ya go!

[Asyn]

C:\Users\drahcir\AppData\Local\Temp\...|>g6k1.class
C:Users\drahcir\AppData\Local\Temp\...|>y6u7.class
C:Users\drahcir\AppData\Local\Temp\...|>g5z6.class
C:Users\drahcir\AppData\Local\Temp\...|>main.class
C:Users\drahcir\AppData\Local\Temp\...|>q3po.class

There ya go!

Delete the Temp dir.

[drahcir]

When I tried deleting the Temp folder I got the following message.

"The action can't be completed because the folder is open in another program"

So how do I close this folder when I don't even know what program is running it?

[sztihamer]

Delete the Temp dir.

You mean that the user should delete it's contents and not the entire directory? That should be a fatal flaw if you want to delete the \Temp folder. Just enter the directory Ctrl+A and delete the problematic stuff!

[Pondus]

try this


TFC - Temp File Cleaner by OldTimer
http://www.geekstogo.com/forum/files/file/187-tfc-temp-file-cleaner-by-oldtimer/
TFC requires a reboot immediately after running. Be sure to save any unsaved work before running TFC.

[drahcir]

OK i've narrowed it down.

jar_cache8193063406112628052.tmp

I can't open it.

Should I just delete it?

The 5 threats that I listed at the start of this thread are all located within it.

[Asyn]

Should I just delete it?

Yes.

[drahcir]

try this


TFC - Temp File Cleaner by OldTimer
http://www.geekstogo.com/forum/files/file/187-tfc-temp-file-cleaner-by-oldtimer/
TFC requires a reboot immediately after running. Be sure to save any unsaved work before running TFC.

I will try this if I get the go ahead to delete the file and it doesn't delete.

Thanks guys for the help so far.

[sztihamer]

Just select it and delete. That's all! No tools needed in order to remove the file. You can do that without any tools or utilities.

[Asyn]

Thanks guys for the help so far.

You're welcome.

[Pondus]

Just select it and delete. That's all! No tools needed in order to remove the file. You can do that without any tools or utilities.

that is true......but using the tool you clean all temp folders.....some you dont even know about

also recomended and used by Essexboy as one of his weekly cleanup tools.   

[sztihamer]

I guess CCleaner can do pretty much the same stuff and even more. I don't like using these kinds of tools, mostly because I love doing it manually or from a command line. But it's just personal preference, some users prefer other methods of keeping their system tidy. It's up to you what do you like and which is effective for you.

[Pondus]

CCleaner can do alot more yes....TFC clean temp folder only

so...run ccleaner first, and the TFC.....then you see all temp files not found by CCleaner



it was made for a reason....by the same man that made OTL / OTS
and used at geeks to go where they remove malware 24/7......and where essexboy work