Yet another Java exploit thread.

[HAVOC]

I got infected by the Anti-piracy ransomware thing yesterday. Is the infection related to the Java exploit?

I used tools recommended on this site and it looks to be fixed. I also uninstalled Java 6 and Java 7 (had both on my system?). While on the Java website they showed an option in the Java control panel, under the security tab to disable Java in the browser (only available in Java 7). If Java is needed, would this be an option to look at or are there other holes?

To be safe, I'll be doing a clean install later this week. How can I make sure Java doesn't get installed when I reinstall? I'm not sure if Java gets installed with one of my programs or if it gets installed with IE.

 

[HAVOC]

I won't be installing Java in my next clean install. I thought I needed it to access a website that I use for work. I just visited the website (without Java) and the website is working normally.

 

[azasadny]

January 13, Krebs on Security [FONT=Times New Roman,Times New Roman][FONT=Times New Roman,Times New Roman]– (International) [/FONT][/FONT][FONT=Times New Roman,Times New Roman][FONT=Times New Roman,Times New Roman]Oracle ships critical security update for Java. [/FONT][/FONT][FONT=Times New Roman,Times New Roman][FONT=Times New Roman,Times New Roman]Oracle released an update for Java to fix the recent critical vulnerability that allowed malware to exploit computers running the program. The update also increases the default security settings for running Java applications from ‘medium’ to ‘high.’ Source: Oracle Ships Critical Security Update for Java — Krebs on Security
[/FONT][/FONT]

 

[partyvan]

Just don't install it during your fresh install. To be completely protected, you also want to disable the Java Plugin for IE9 in the Manage Add-ons menu.

It doesn't seem to matter how much they update or what they pretend to do. Java is just too easily compromised. Malware of all sorts just goes right past all system security, disables your firewall, antivirus, everything. The best thing to do is let Java go and move on to HTML5.

 

[HAVOC]

I know about the "critical security update" but also read that Java still has a bunch of holes. So I won't be using it anymore.
I had a message pop up from MSE stating that it detected and cleaned an item, a couple minutes later, the FBI warning. So I don't know if it's related.

 

[azasadny]

Malware impersonates Java patch | PCWorld