MSE detected these

[green98ls]

does anybody know anything about these or had MSE detect on your PC, they just came up today (10/31/09) when scanned around 7am.

both were located in the same place on my system.

here's the links provided when you click "Get more information about this item online"

Trojan:Java/Selace.E

Exploit:Java/CVE-2008-5353.A

thanks

 

[Jacee]

Exploit:Java/CVE-2008-5353.A

A security vulnerability in the Java Runtime Environment (JRE) related to deserializing calendar objects may allow an untrusted applet or application to escalate privileges. For example, an untrusted applet may grant itself permissions to read and write local files or execute local applications that are accessible to the user running the untrusted applet.

SUSE Security Announcement: IBM Java Version 5

Download ATF Cleaner ATF-Cleaner.exe - www.atribune.org
Click "Main" > check 'select all' (except Prefetch) this first time using it, then click "Empty Selected". Do the same for FireFox or Opera if you use either of those browsers.
Finally go to Control Panel > Internet Options.
On the General tab under "Temporary Internet Files" Click "Delete Files".

Next update Java:


Updating Java:

• Download the latest version of Java Runtime Environment (JRE) 6.
• Scroll down to where it says "Java Runtime Environment (JRE) 6u17 allows end-users to run Java applications".
• Click the "Download" button to the right.
• Check the box that says: "Accept License Agreement".
• The page will refresh.
• Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
• Close any programs you may have running - especially your web browser.
• Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
• Check any item with Java Runtime Environment (JRE or J2SE) in the name.
• Click the Remove or Change/Remove button.
• Repeat as many times as necessary to remove each Java versions.
• Reboot your computer once all Java components are removed.
• Then from your desktop double-click on jre-6u17-windows-i586-p.exe to install the newest version.

 

[green98ls]

thanks for the info

I ran ATF cleaner for IE and firefox.

I already had the lastest Java version 16 installed on my PC 32bit and 64bit.

MSE said it deleted both the files. I re ran a quick scan with MSE and Malwarebytes and both came back with nothing.

Should I do a full scan with both programs to double check? or should I be good now?

 

[Jacee]

I'd run a full scan.