Possible False Alarm

Viruses and worms
1

I recently ran a scan and it detected 10 “infected files”:

C:\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\3cfc999a-1c531f8a Win32:MalOb-EJ[Cryp]
C:\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\558de9ca-2d205c14 Win32:MalOb-FN[Cryp]
C:\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13\5ca3dccd-418086bd Win32:MalOb-EJ[Cryp]
C:\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49\5e26e071-226aacfd Win32:MalOb-FN[Cryp]
C:\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\5feaf0b4-1c752169 Win32:MalOb-FN[Cryp]
C:\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\6a2ca1e3-42169f05 Win32:MalOb-FN[Cryp]
C:\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\4a0fa501-56ce8f5c\glass\flying.class Java:Agent-DC[Trj]
C:\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4\1721fbc4-4c3fad0a\glass\flying.class Java:Agent-DC[Trj]
C:\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\4a0fa501-56ce8f5c\glass\Glocker.class Java:Agent-DD[Trj]
C:\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4\1721fbc4-4c3fad0a\glass\Glocker.class Java:Agent-DD[Trj]

I never encountered anything that would be stored in my Java files so I don’t know if these are false alarms. I didn’t see any performance issues between the scan before this that said I was clean and after I moved these files to chest to be safe. Also, this scan was 2 days ago. That day, Avast released a defected update. Anyhow, I just want to know if these are false alarms or actual malware. If it is, then what should I do because I have not seen any problems with my computer yet. Please help and thank you. :slight_smile:

Update: this is the post I wanted to post, I accidently posted it early and got cut off where I was typing

2

This may be from some FakeAV…quote avast

the spectrum of malware covered by Win32:MalOb consists of fake antiviruses, fake codecs, spam engines etc.

check your computer for malware with this

Malwarebytes Anti-Malware 1.50.1 http://filehippo.com/download_malwarebytes_anti_malware/
always update before you scan so you have the latest database
click on the remove selected button to quarantine anything found

post the scan log here

3

Malwarebytes’ Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6349

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

4/13/2011 12:06:47 AM
mbam-log-2011-04-13 (00-06-47).txt

Scan type: Quick scan
Objects scanned: 166983
Time elapsed: 4 minute(s), 46 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Just ran a quick scan and this is the output.
p.s I updated my first post, I accidently hit post when typing comment.

4

Download the program JavaRa Link

Click Remove older versions > Search for updates > Search

From the site download the latest version of Java

5

Thanks, but I just want to know if my “infected” files are really malware or false positives. If it is malware, what can I do to ensure that there are not other malware on my computer that Avast didn’t detect.