Unsolved

This post is more than 5 years old

20 Posts

12808

August 22nd, 2009 13:00

Artemis 18759B8F1D66 Trojan...what is it and what caused it?

I have had my PC for 5 years now and thankfully have never had a virus.  I have very good Virus Software and it is on continuous scan.  It did, however, pick up an Artemis Trojan which it isolated last week before it could do any harm.  I don't open emails from anyone that I don't know, nor do I open an executable files.  I did, however, when prompted for java updates on my PC, start this update for java.  It not only couldn't do the update, but asked if I wanted to uninstall.  I selected "yes" to this.

The Artemis Trojan hit my PC twice a few minutes apart.  It showed it hitting on an install and an uninstall.  It showed up in the ProgramFiles/Dell/MediaExperience/Plugins/WildTangent/wsetup.exe

My question is:  Could this have come through from a Java Update on my PC.  It was not done on the internet, put as a prompt on my PC.

What do you think?

 

 

 

 

3 Apprentice

 • 

20.5K Posts

August 22nd, 2009 15:00

If you are using McAfee, Artemis is not a Trojan. It is McAfee's technology.  http://www.mcafee.com/us/enterprise/products/artemis_technology/index.html

If I were you, I would manually update Java. If McAfee alerts you after or during installation, refer to this to make sure it is not a false positive:

http://community.mcafee.com/showthread.php?t=228162

 

Please follow these steps to remove older version Java components and update.

  • Download the latest version of Java Runtime Environment (JRE) 6.
  • Scroll down to where it says Java SE Runtime Environment (JRE) 6 Update 16 .
  • Click the "Download" button to the right.
  • Check the box that says: "Accept License Agreement".
  • NOTE: As always during installations, beware of any pre-checked option to install a toolbar. If you do not want it, UNcheck it.
  • The page will refresh.
  • Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
  • Close any programs you may have running - especially your web browser.
  • Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
  • Check any item with Java Runtime Environment (JRE or J2SE) in the name.
  • Click the Remove or Change/Remove button.
  • Repeat as many times as necessary to remove each of the Java versions.
    Close Add/Remove.

  • * In Windows Explorer, navigate to C:\Program Files\Java =this folder. Delete any subfolders.
    * Do NOT delete C:\Program Files\ JavaVM =this folder, if found!
  • Reboot your computer once all Java components are removed.
  • Then from your desktop double-click on jre-6u16-windows-i586-p.exe to install the newest version.

Delete the downloaded installation file after completing the above procedure and reboot if not prompted to do so.

 

20 Posts

August 28th, 2009 12:00

Thank you very much.  I had been on the McAfee site and did see Artemis listed as their technology.

You have made me feel much better knowing that it is not a trojan.

 

Bonnie

 

 

3 Apprentice

 • 

20.5K Posts

August 28th, 2009 14:00

You're welcome.

Here is my standard list of simple steps that you can take to keep your computer safe.

 

The following suggestions are general prevention and are not customized for your computer. You may have already taken some of these steps, and depending on your current security, you may not need to implement all of these:


1. Visit Microsoft Update: Make sure that you have all the Critical Updates recommended for your operating system and IE. The first defense against infection is a properly patched OS. Microsoft's widows Update: http://v4.windowsupdate.microsoft.com/en/default.asp

2. Please use a firewall and realtime anti-virus. Keep the anti-virus software and firewall software up to date.

3.You might consider installing Mozilla / Firefox as a second browser so you have an option in case you ever have a problem with IE.
http://www.mozilla.com/en-US/

4. Do not use file sharing. Even the safest P2P file sharing programs that do not contain bundled spyware, still expose you to risks because of the very nature of the P2P file sharing process. By default, most P2P file sharing programs are configured to automatically launch at startup. They are also configured to allow other P2P users on the same network open access to a shared directory on your computer. The reason for this is simple. File sharing relies on its members giving and gaining unfettered access to computers across the P2P network. However, this practice can make you vulnerable to data and identity theft. Even if you change those risky default settings to a safer configuration, the act of downloading files from an anonymous source greatly increases your exposure to infection. That is because the files you are downloading may actually contain a disguised threat. Many very malicious worms and trojans, such as the Storm Worm, target and spread across P2P files sharing networks because of their known vulnerabilities.

5. Before using or purchasing any Spyware/Malware protection/removal program, always check the following Rogue/Suspect Spyware Lists. http://www.spywarewarrior.com/rogue_anti-spyware.htm http://www.malwarebytes.org/database.php

6. If you have not already done so, you might want to install CCleaner and run it in each user's profile: http://www.ccleaner.com/ ** UNcheck the option to install the Yahoo toolbar that is checked by default for the Standard version, or download the toolbar-free versions (Slim or Basic) when given the option for those.

7.Web Of Trust , uses colored alerts to warn about risky websites warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:

  • Red for Warning = STOP
  • Yellow for Use Caution
  • Green for Safe
  • Grey for Unknown

There is a Web Of Trust version for Firefox as well.

8. You might consider installing SpywareBlaster: http://www.javacoolsoftware.com/spywareblaster.html
It will:
Prevent the installation of ActiveX-based spyware, adware, browser hijackers, dialers, and other potentially unwanted software.
Block spyware/tracking cookies in Internet Explorer and Mozilla Firefox.
Restrict the actions of potentially unwanted sites in Internet Explorer.
Tutorial here:http://www.bleepingcomputer.com/forums/tutorial49.html
Periodically check for updates

9. Here are some helpful articles:
"How did I get infected?"
http://www.bleepingcomputer.com/forums/topic2520.html


"I'm not pulling your leg, honest"
by Sandi Hardmeier
http://www.microsoft.com/windows/IE/community/columns/pulling.mspx

No Events found!
ejn63

ejn63

Rank:
10 Elder 10 Elder
Member Since:
26/01/2013
Posts:
26933
Accepted Solutions:
2588
Badges Earned:
6
Rockstar
Amethyst
Jasper
Beryl
Amber
TechExpert

Top