Unsolved
This post is more than 5 years old
20 Posts
0
12808
August 22nd, 2009 13:00
Artemis 18759B8F1D66 Trojan...what is it and what caused it?
I have had my PC for 5 years now and thankfully have never had a virus. I have very good Virus Software and it is on continuous scan. It did, however, pick up an Artemis Trojan which it isolated last week before it could do any harm. I don't open emails from anyone that I don't know, nor do I open an executable files. I did, however, when prompted for java updates on my PC, start this update for java. It not only couldn't do the update, but asked if I wanted to uninstall. I selected "yes" to this.
The Artemis Trojan hit my PC twice a few minutes apart. It showed it hitting on an install and an uninstall. It showed up in the ProgramFiles/Dell/MediaExperience/Plugins/WildTangent/wsetup.exe
My question is: Could this have come through from a Java Update on my PC. It was not done on the internet, put as a prompt on my PC.
What do you think?
Bugbatter
3 Apprentice
3 Apprentice
•
20.5K Posts
0
August 22nd, 2009 15:00
If you are using McAfee, Artemis is not a Trojan. It is McAfee's technology. http://www.mcafee.com/us/enterprise/products/artemis_technology/index.html
If I were you, I would manually update Java. If McAfee alerts you after or during installation, refer to this to make sure it is not a false positive:
http://community.mcafee.com/showthread.php?t=228162
Please follow these steps to remove older version Java components and update.
Close Add/Remove.
* In Windows Explorer, navigate to C:\Program Files\Java =this folder. Delete any subfolders.
* Do NOT delete C:\Program Files\ JavaVM =this folder, if found!
Delete the downloaded installation file after completing the above procedure and reboot if not prompted to do so.
purpleandred
20 Posts
0
August 28th, 2009 12:00
Thank you very much. I had been on the McAfee site and did see Artemis listed as their technology.
You have made me feel much better knowing that it is not a trojan.
Bonnie
Bugbatter
3 Apprentice
3 Apprentice
•
20.5K Posts
0
August 28th, 2009 14:00
You're welcome.
Here is my standard list of simple steps that you can take to keep your computer safe.
The following suggestions are general prevention and are not customized for your computer. You may have already taken some of these steps, and depending on your current security, you may not need to implement all of these:
1. Visit Microsoft Update: Make sure that you have all the Critical Updates recommended for your operating system and IE. The first defense against infection is a properly patched OS. Microsoft's widows Update: http://v4.windowsupdate.microsoft.com/en/default.asp
2. Please use a firewall and realtime anti-virus. Keep the anti-virus software and firewall software up to date.
3.You might consider installing Mozilla / Firefox as a second browser so you have an option in case you ever have a problem with IE.
http://www.mozilla.com/en-US/
4. Do not use file sharing. Even the safest P2P file sharing programs that do not contain bundled spyware, still expose you to risks because of the very nature of the P2P file sharing process. By default, most P2P file sharing programs are configured to automatically launch at startup. They are also configured to allow other P2P users on the same network open access to a shared directory on your computer. The reason for this is simple. File sharing relies on its members giving and gaining unfettered access to computers across the P2P network. However, this practice can make you vulnerable to data and identity theft. Even if you change those risky default settings to a safer configuration, the act of downloading files from an anonymous source greatly increases your exposure to infection. That is because the files you are downloading may actually contain a disguised threat. Many very malicious worms and trojans, such as the Storm Worm, target and spread across P2P files sharing networks because of their known vulnerabilities.
5. Before using or purchasing any Spyware/Malware protection/removal program, always check the following Rogue/Suspect Spyware Lists. http://www.spywarewarrior.com/rogue_anti-spyware.htm http://www.malwarebytes.org/database.php
6. If you have not already done so, you might want to install CCleaner and run it in each user's profile: http://www.ccleaner.com/ ** UNcheck the option to install the Yahoo toolbar that is checked by default for the Standard version, or download the toolbar-free versions (Slim or Basic) when given the option for those.
7.Web Of Trust , uses colored alerts to warn about risky websites warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:
There is a Web Of Trust version for Firefox as well.
8. You might consider installing SpywareBlaster: http://www.javacoolsoftware.com/spywareblaster.html
It will:
Prevent the installation of ActiveX-based spyware, adware, browser hijackers, dialers, and other potentially unwanted software.
Block spyware/tracking cookies in Internet Explorer and Mozilla Firefox.
Restrict the actions of potentially unwanted sites in Internet Explorer.
Tutorial here:http://www.bleepingcomputer.com/forums/tutorial49.html
Periodically check for updates
9. Here are some helpful articles:
"How did I get infected?"
http://www.bleepingcomputer.com/forums/topic2520.html
"I'm not pulling your leg, honest"
by Sandi Hardmeier
http://www.microsoft.com/windows/IE/community/columns/pulling.mspx