Do I need Java?

eyeinthesky

Hi, from time to time, I am getting notifications from my AV that a trojan or other nasty has been found in my Java cache. The AV prog deletes it, so I guess my machine is safe, but do I really need Java? and am I getting these trojans from java updates?

RussJK

My advice is to get rid of Java.

It's probably the single most insecure application on your computer. When exploited by attackers, it allows malware to be installed on your computer without your knowledge or participation.

If it transpires that you actually need it (some programs make use of it, including Open Office), then at worst you can reinstall it.

Java programmers who read this probably hate me for saying it, but it's not just me saying it - you can read more about it on Kreb's On Security:
http://krebsonsecurity.com/2010/10/java-a-gift-to-exploit-pack-makers/

Evidence, successful exploits as recorded by malware servers themselves:
http://www.m86security.com/newsImages/TRACE/ph2.png
http://labs.m86security.com/wp-content/uploads/2011/05/panel1.png
http://labs.m86security.com/wp-content/uploads/2011/06/Statistics.png
http://krebsonsecurity.com/wp-content/uploads/2010/09/blackholemain.jpg
http://krebsonsecurity.com/wp-content/uploads/2010/10/seosploit1.jpg
http://krebsonsecurity.com/wp-content/uploads/2010/10/seosploit3.jpg

eyeinthesky

Thanks Russ, just removed it.

debitcardmayhem

eyeinthesky wrote: »

Hi, from time to time, I am getting notifications from my AV that a trojan or other nasty has been found in my Java cache. The AV prog deletes it, so I guess my machine is safe, but do I really need Java? and am I getting these trojans from java updates?

OF course delete it .... your AV that is because it doesn't tell the world which AV it is . Sorry RussJk it's may be just me of course . Call me old fashioned but "from time to time, I am getting notifications from my AV" how many notifications, what Av is it and for how long, which version of Linux/iOS/or perhaps Windows is it ...blind leading the blind ??
Sorry guys information is everything.

debitcardmayhem

Oh and course I forgot get rid of Java too, whoops.:beer:

eyeinthesky

debitcardmayhem wrote: »

OF course delete it .... your AV that is because it doesn't tell the world which AV it is . Sorry RussJk it's may be just me of course . Call me old fashioned but "from time to time, I am getting notifications from my AV" how many notifications, what Av is it and for how long, which version of Linux/iOS/or perhaps Windows is it ...blind leading the blind ??
Sorry guys information is everything.

Hopefully I'm sorted now, but I have had the notifications every few weeks, for the last 6 months, always in the java cache. I am using a laptop running windows vista, and norton internet security, both of which I am very happy with. Norton always says it has found and deleted these threats, but I am just getting fed up with them now, and would rather avoid them if possible.

waddler_8

http://www.java.com/en/download/help/cache_virus.xml

If you find a need to have Java installed in the future, always ensure you have the latest version and any older versions are removed.

debitcardmayhem

Aaah the old Norton one that's ok then , put the AV back on and delete Java but of course you followed Russ's advice and did so. I was not really wasn't getting at you nor the antipodean it was just your original post was a bit vague,I've had a bad day so accept my apologies. Russ you can wait for said apologies

John_Gray

There are a few reasons why you might need to have Java installed, the most likely one being if you have LibreOffice or OpenOffice installed (as RussJK says above). But most other programs have gone over to Flash...

RussJK

debitcardmayhem wrote: »

Russ you can wait for said apologies

Haha, you can't be forgiven if you're not sorry

I figured on the balance that the OP hadn't been infected, and chose not to follow that line of thought. Still, it won't hurt for anyone to do a quick scan with Malwarebytes or Hitmanpro:
http://www.malwarebytes.org/mbam-download.php
http://www.surfright.nl/en/hitmanpro

spud17

If you watch the Formula 1 official live timing from http://www.formula1.com/default.html, then you will need Java.