Exploit:Java/CVE-2010-0840.IO help.

[SickCom]

Hi,

I recently clicked on a fake Java update, which infected my computer with:

Exploit:Java/CVE-2010-0840.IO
TrojanDownloader.Java/OpenConnection.OS
TrojanDownloader.Java/OpenConnection.OU

These were recognised after doing a full MSE scan, and selecting these files for removal.

Everytime I browse the web, I am prompted to allow a Java update.

From what I have researched, this is a Rootkit virus and I will most likely be performing a clean install.

First I have some questions:

1. What exactly is this virus doing to my computer? All I can find are people saying it's collecting personal info to be sent out remotely. Is this correct?

2. Will this infect my hardware/firmware? Will I need to flash my Bios or replace any hardware?

- I have 20 gigs of iTunes music (most of it backed up), and 3 gigs (100 songs, not backed up) of Propellerhead Reason song files. I was thinking about putting the Reason song files and a few iTunes albums on a cloud drive, and then bringing them back after the clean install.-

3. Is it a bad idea to move files like this to a cloud drive, and then back onto the clean computer? If so, there are sites that can scan files for viruses right?

- I only care about the Reason files, so it is prudent that they not be erased. Everything else can be erased.-

4. Reason also uses a ComStick that will have to be cleaned. How do I do this? Or should I request an new ComStick from the company?

- I have an MPD 26 (Akai MIDI controller) attached to my computer now, and I do believe it contains memory, do I need to worry about it being infected as well?

- On that same note, I have a Firewire Focusrite Saffire Pro 24 Preamp. It, however, has not been powered up since I got the virus. Do I need to worry about it being infected?

--

I have tried to uninstall Java 7v9, so I can reinstall Java again from the website. It will not allow itself to be uninstalled. It says Java 7v7 gathering information, and then does nothing.


This is the first virus I have gotten in years. The fake update had a certificate and everything, I was almost sure it was authentic before I clicked it.

Let me know what you need from me, or anyway I can help you to help me.

I have not included much personal/system info on my page yet, because I don't know what info this virus is collecting from me at the moment.


Thansks,
SickCom

 

[bigcitycat]

I wouldn't transfer the files by sticking a usb into your pc while its powered on. Download a copy of ubuntu and burn a live dvd or usb and then boot up your pc with the live ubuntu. Select try Kubuntu. You could then insert a clean usb and use the file manager to copy and paste all the files to it. It's free. Kubuntu | Friendly Computing Then clean install.

 

[AlterUrEgo]

I have 20 gigs of iTunes music (most of it backed up), and 3 gigs (100 songs, not backed up) of Propellerhead Reason song files. I was thinking about putting the Reason song files and a few iTunes albums on a cloud drive, and then bringing them back after the clean install.

I learned a while back to have backups on seperate drives and have nothing but OS on the C drive. I got a 80 gig drive I use for my Windows OS and have my music and movies and all the important stuff saved in their own "portable" drives.
After almost loosing my 200 gigs of music to a raid failure was the turning point in not having anything on the OS drive but the OS.