Share via

Java Update downloads a trojan virus!

Anonymous
2013-07-02T21:01:20+00:00

I just downloaded a critical update from Java and it turned out to be a trojan named Artemis. My antivirus caught it and deleted it. I'm a novice so is there anything I should do now? Is this common?

Windows for home | Previous Windows versions | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

Answer accepted by question author

  1. Anonymous
    2013-07-02T21:32:18+00:00

    Doubt it was a "real" Java update - it was malware masquerading as a Java update.   It's good that your antivirus (I believe that's a McAfee detection) intercepted it.

    But there are issues with Java exploits and if you do not require Java why not uninstall it?  I did that last year and have yet to need Java.

    If you do need Java for certain programs then be sure you keep it current and you remove any old versions from Control Panel.

    http://krebsonsecurity.com/2013/04/java-update-plugs-42-security-holes/

    3 people found this answer helpful.
    0 comments No comments

7 additional answers

Sort by: Most helpful
  1. Anonymous
    2013-07-04T21:44:05+00:00

    McAfee's official explanation: Some of my virus detections are named 'Artemis'

    Same article I linked-to above (as in "See Source"). Guess you missed it ;-)

    W3Techs usage statistics and market share data of Java on the web

    This one I didn't know about. Thanks for the link, quietman7 ;-) Good info to show/demonstrate why users do not need Java. Also added it to my Java related thread/post (also linked-to above).

    0 comments No comments
  2. quietman7 MVP Alumni 19,735 Reputation points Volunteer Moderator
    2013-07-04T02:54:03+00:00

    McAfee's official explanation: Some of my virus detections are named 'Artemis'

    It's essentially the same as summarized by RickCP but since you use McAfee and this is a common detection I thought you should have the link.

    Since you downloaded from the Oracle web site I'm more inclined to believe it was a false positive and you should follow the instructions in the link provided by RickCP to submit a sample. McAfee also advises to forward these detected files to the Avert Lab's Threat Center.

    I also agree You don't need Java.

    W3Techs usage statistics and market share data of Java on the web

    0 comments No comments
  3. Anonymous
    2013-07-03T21:22:36+00:00

    By the way, Le Boule, how did you know it was a McAfee detection?

    Ah, you should know Le Boule is a very wise - malware experienced guy :-)

    Please be aware that 'Artemis' is McAfee software generic title given to "unknowns". It's also known as the former name of McAfee 'Global Threat Intelligence' technology (a component of McAfee Security Center's virus protection module) for enhanced detection of unknown threats based on the behavior of a file. See Source.

    I would also concur with Le Boule on thinking that was a 'fake' Java update, but shall you suspect it might be a case of a 'false positive' from McAfee, you may wish to contact them and follow their procedure suggested here.

    Further, I also second Le Boule's recommendation in respect of removing Java 'completely' - if you don't use/need it. Trust us: You won't miss it and will be safer (even if you're at the latest version) without it! See a recent/possible related thread for further recommendations.

    0 comments No comments
  4. Anonymous
    2013-07-03T19:46:22+00:00

    Doubt it was a "real" Java update - it was malware masquerading as a Java update.   It's good that your antivirus (I believe that's a McAfee detection) intercepted it.

    But there are issues with Java exploits and if you do not require Java why not uninstall it?  I did that last year and have yet to need Java.

    If you do need Java for certain programs then be sure you keep it current and you remove any old versions from Control Panel.

    http://krebsonsecurity.com/2013/04/java-update-plugs-42-security-holes/

    Thank you for your help. It sure looked like an authentic Java update. It came from Oracle and I checked the certificates and it said ok. As I mentioned, I'm pretty new and I hope I don't bother anyone with dumb questions. I'll try my best to find things on my own first, but in the meantime thanks for any help and patience you can provide! By the way, Le Boule, how did you know it was a McAfee detection?

    0 comments No comments