I have avast! 5, the freebie, and it keeps saying stuff about these Java files, that were installed using Sun’s own VM. It keeps hitting on these vmain.class, and c.class files in these cache sub-directories in my Application Data. (I wish I could copy and paste from there) The severities are High and Medium. The Statuses are “Other:Malware-gen”, “Java:Agent-AW [Expl]”, and “Java:Jade-C [Heur]”. What does all that mean and how’d it get there?
Try clearing your cache on Java. Just go to Program Control > Java Panel > Options of Internet Temporary > Delete all > Scan again > Feed back.
Its alway good to clear your cache because if you have been on a infecting site then its might have been creating java cache if the site was requiring java.
Otherwise if you want you could clear your browser cache.
You could send these exploits [Expl] and Heuristic [Heur] detections for analysis as possible false positives.
Send the sample to avast as a False Positive:
Open the chest and right click on the file and select ‘Submit to virus lab…’ complete the form and submit, the file will be uploaded during the next update.
Periodically check it (scan it in the chest), there should still be a copy in the chest.
Ok, I went to clear it, and I still get the threats. That doesn’t surprise me, because when I looked at the temporary files, I didn’t see any c.class or vmain.class, but I did see files from 1998!!!
Something must have happened, because instead of 8 threats I have 6. I think I’ll report false positives.
Whilst they may not be FPs, since these are newly created signatures for JAVA [Expl] & [Heur] it is worth having them analysed so that these signatures can be fine tuned.