Kaspersky Labs: Exploit.HTML.CodeBaseExec

[LouBee]

Hi

Me again... An online check with Kasperksy Labs has found Exploit.HTML.CodeBaseExec.

As in previous cases, Kaspersky is the only virus/spyware checker that has found it.

Is this because it is better than the others? As before, I have been unable to get rid of the virus.

Any suggestions?

Merry Christmas.

LB

[FastGame]

As in previous cases, Kaspersky is the only virus/spyware checker that has found it.

Is this because it is better than the others?

Detection, packer support, unpacking, yes its the best IMHO

That virus should be detected by other AV's, its known by other names http://www.viruslist.com/de/viruses/...?virusid=57005

Clean out your Java cache & browser cache.

[LouBee]

Originally Posted by FastGame

Detection, packer support, unpacking, yes its the best IMHO

That virus should be detected by other AV's, its known by other names http://www.viruslist.com/de/viruses/...?virusid=57005

Clean out your Java cache & browser cache.

Where's my Java cache please?

[FastGame]

Are you using Sun Java ? or MS Virtual Machine ?

Sun Java= Control panel> Java> General> Temporary Internet Files> Delete Files.

If using MS VM, I guess Disk Cleanup works....but not sure.

I see Curio floating around the forum, he's better at virus removal (all security) than I am.

Maybe he'll comment ?

[Curio]

Quick and dirty generic method for removing malware that may not be active.

1. Download and run MWAV from Microworld - selecting any drives you want to check.
2. When it finishes open the logfile and search it for the word 'infected'.
3. Delete the files listed as infections by moving them to the recycle bin.

It is always worth remembering however that all AVs - yes all of them - do give false positives so you should check your files before you delete them especially if you are a programmer and just happen to have used the same filename as a real malware. Thats why you move them to the recycle bin instead of trashing them right away.

Importantly for firefox users you can clear the cache by clicking the 'tools' menu then 'options' and selecting 'Privacy' - theres a bunch of things you can clear or a big button 'clear all'.

PS - MWAV uses the Kaspersky engine and databases and can remove everything it finds automatically if you pay the £6 for 1 month fee. This is actually better value than it sounds for reasons which I can not go into here. AVComparatives lists the kaspersky detection rate as better than 99.8% - the best of any tested.