MS03-011 Trojan Virus
Author
Discussion

Big Al.

Original Poster:

69,336 posts

288 months

Friday 17th March 2006
quotequote all
Just picked this up with AVG and it wont self heal!

Any ideas as to how to get rid of it?

Thanks in advance

thepassenger

6,962 posts

265 months

Friday 17th March 2006
quotequote all
Just looked on google and the first few hits are about a Microsoft security update for their old java virtual machine.

Personally I'd try running Windows Update on your machine and apply every update it tells you is avaliable... see if it brings in (or removes) their buggy Java system.

Podie

46,649 posts

305 months

Friday 17th March 2006
quotequote all
Blimey, that's an oldie.. April 2003 IIRC!

Information you require is here --> http://support.microsoft.com/default.

Ballistic Banana

14,706 posts

297 months

Friday 17th March 2006
quotequote all
Podie said:
Blimey, your an oldie..


Now theres no need to be like that Podie

Is that the Free AVG Al or the Payed up one?

BB

Podie

46,649 posts

305 months

Friday 17th March 2006
quotequote all
Ballistic Banana said:
Podie said:
Blimey, your an oldie..


Now theres no need to be like that Podie

Is that the Free AVG Al or the Payed up one?

BB




thepassenger's suggestion of Windows Update isn't a bad idea... make sure you look at the "optional" stuff too

Big Al.

Original Poster:

69,336 posts

288 months

Friday 17th March 2006
quotequote all
Ballistic Banana said:
Is that the Free AVG Al or the Payed up one?

BB


It's the freebie!

Thanks guys..

Did the Mircosoft updates before I posted, my secrurity system isn't picking anything up. It's only when I run AVG it tells me I'm infected!



_dobbo_

14,619 posts

278 months

Friday 17th March 2006
quotequote all
What file does it say is infected? I get a couple of false positives with AVG, usually to do with JAVA

Big Al.

Original Poster:

69,336 posts

288 months

Friday 17th March 2006
quotequote all
_dobbo_ said:
What file does it say is infected? I get a couple of false positives with AVG, usually to do with JAVA


I'll fire up the lappy later, run AVG and let you know.

BliarOut

72,863 posts

269 months

Friday 17th March 2006
quotequote all
XP? If it's only just cropped up you could do a system restore to a few days ago and then update everything before you catch it again. Lots of ifs, but that route could work.

Big Al.

Original Poster:

69,336 posts

288 months

Friday 17th March 2006
quotequote all
Big Al. said:
_dobbo_ said:
What file does it say is infected? I get a couple of false positives with AVG, usually to do with JAVA


I'll fire up the lappy later, run AVG and let you know.


OK I did a little cleaning up manually as AVG originally picked up 28 infected files. Seems like I've got it down to 4!

AVG is identifying the virus as Java/ByteVerify.

AVG is still running as I type, hoping that it will self heal on completion.

Nope! Still got 4, managed to stick one in the vault, so still got 3 infected files!

Big Al.

Original Poster:

69,336 posts

288 months

Friday 17th March 2006
quotequote all
BliarOut said:
XP? If it's only just cropped up you could do a system restore to a few days ago and then update everything before you catch it again. Lots of ifs, but that route could work.


I'll try that as a last resort, but I've done a lot of cleaning up in the last few days and don't want to have to cover old ground and start again.

_dobbo_

14,619 posts

278 months

Saturday 18th March 2006
quotequote all
Big Al. said:

AVG is identifying the virus as Java/ByteVerify.



AVG finds this every time I run a virus scan, in my JAVA folders. I'm reasonably sure it's a false positve. edit In any case, to get rid of it, go to the control panel, and then go to "JAVA". Make sure no browsers are running, then select "delete files" at the bottom. This should clear out all your cached JAVA applets, including the one that's showing as a virus.

Having done this you can re-run your scan to ensure you are now clean.




>> Edited by _dobbo_ on Saturday 18th March 09:45

Big Al.

Original Poster:

69,336 posts

288 months

Saturday 18th March 2006
quotequote all
Thanks for that I'll give it a go later.

I did re-run AVG last night and it was clean! seems to be a ghost!