Runescape Trojan

Viruses and worms
1

Hi :slight_smile:

Re: Runescape + Java + Trojan

Wondering if someone could give me some help please.

My son has been playing Runescape for about 5 years. ( Never had any problems Before )
Then today things suddenly went wrong!

  1. He went to the Runescape website as Normal.
  2. He clicked to play Runscape as Normal.
  3. Avast popped up telling him about a Trojan :o

The first time my son tried to play Runescape this morning, I wasn’t there to witness what happened.
He came running to get me and by the time I got there…

  1. Avast red warning had already gone again.
  2. Runescape seemed to be stuck loading with little wait O spinning away.
  3. Tried to exit Intenet Explorer but couldn’t.
  4. Had to use Task Manager to shut down Internet Explorer.

Then got my son to try and play Runescape again while I was there to see what was going on.

  1. He went to the Runescape website as Normal.
  2. He clicked to play Runscape as Normal.
  3. Avast popped up telling him about a Trojan :o
    This Time I Took Over…
  4. Clicked Avast for More Information.
  5. Avast opened another page within IE and said words to the affect…
    You have just dodged a bullet!
    And something to do with…
    Runescape, Java and a Trojan ???

So What Now?

  1. Has my sons computer been infected - or - Can I presume that Avast blocked the Trojan before it got into the computer?
  2. Could it be a False Alarm?
  3. Will the Runescape people already know they have a Java Exploit Trojan?

What Do I Do Next?

Got a very miserable teenager to cope with as well now ::slight_smile:

Please Advise?

Thanks! :wink:

NOTE: Quick Scan Came Up Clean

2

can you attach a screenshot of the avast pop up?

alternative…write down all info on it and post here

3

Hi!

Forgot to get one off the actual pop up :-[

But From The Avast More Information Page - It Said…

4

dont find anything on that site…yet

but run a scan with AdwCleaner…it will remove any browser toolbar crap…
then a quick scan with Malwarebytes (make sure it is updated first) click the “remove selected” button after scan to quarantine anything it may find

http://forum.avast.com/index.php?topic=53253.0

you may post the logs here

5

Hi Pondus :slight_smile:

Did you click to play?

It was as soon as he clicked to play and Java started up :frowning:

Newest version of Java installed.

Just running a Full Scan with Avast.
Luckily…
Up to now it looks like Avast did stop the little :-X before it managed to get into the computer.

Noticed on Avast Shields…
Web Scanned = 2 Infected
That would be the 2 times he clicked to play Runescape.

Thanks!

6

Hi :slight_smile:

Avast - Full Scan = Clean
Installed & Updated…
MBAM - Quick Scan = Clean

However!
Did a quick Google of Runescape Trojan ( Within a 24 Hour Period ) and it looks like there is a Trojan problem with Runescape ::slight_smile:

Guess my son will just have to wait until Runescape has cleaned up.

Big Thank You To Avast For Saving His Computer :-*

7

Its Java Trojan If MBAM Returned clean then it shouldnt have affected you.Unless you still get avast alerts constantly you are safe.

8

Hi!

Sorry it’s taken me so long to come back :-[ Had a hectic day yesterday.

Well…
Thinking now that the Trojan alert may possibly have been a false positive :-
Although I did notice this person has the same problem: http://forum.avast.com/index.php?topic=108175.0

Just to make things even more Confusing :frowning:
Once the Trojan Alert had seemingly vanished - Runescape Said… Java Not Installed!
Updated To: Java 7
Runescape Still Said… Java Not Installed!
So I decided to uninstall Java and start all over again.
Just as I was about to reinstall Java… Noticed Java was about to give me the 64bit version ???
Then It Dawned On Me ::slight_smile: ( Daft little trick that my son has done once before ) He’d somehow managed to delete his IE icon from windows 7 taskbar.
Made a new one from his Desktop Icons. But not remembered that the Desktop Icon was for the 64bit version of Internet Explorer.
So when Runescape was saying that Java wasn’t installed… It Really Wasn’t! ( Well the 32bit Java was But not the 64bit )

Note: Still not really sure what to make of the Java Trojan warning.
Nothing in the Virus Chest - & - Scans all Clean.

Thanks!