Win a copy of Mesos in Action this week in the Cloud/Virtualizaton forum!
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

Warning: Java component download site infected with malware

 
Darryl Burke
Bartender
Posts: 5126
11
Java Netbeans IDE Opera
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
  • A Google search for 'swing sliding panel' gave this as the first result: http://www.java2s.com/Product/Java/Swing/OutlookBar-SlidePane.htm
  • The page contains links to SyGem Software products
  • On clicking a SyGem link, Avira flagged a virus but the computer was infected. I suspect multiple malware and that the infection resulted from a virus/adware that went undetected by Avira
  • The symptoms observed are regular popping up of the default browser with advertising pages, and corruption of Windows7 desktop gadgets, with the clock showing as a black square with a second hand pointing straight up
  • Downloaded and installed Ad-Aware, which flagged and removed 10 malware objects. During the scan it halted the process zrr.exe several times.
  • With guidance from various Microsoft and third party help/support sites I removed the registry folder

  • (in case that last character doesn't display in your browser, it's the graphic character for the left bottom corner of a box -- looks a lot like L)
  • This solved the problem as far as the gadgets are concerned. I'll watch for a few days before I can be sure that all problems are solved


  • This is being multiposted on the Swing / AWT / SWT / JFace forum and cross posted to other Java forums.

    db
     
    Rob Spoor
    Sheriff
    Pie
    Posts: 20531
    54
    Chrome Eclipse IDE Java Windows
    • Mark post as helpful
    • send pies
    • Quote
    • Report post to moderator
    Have you contacted SyGem? Perhaps they are not aware of this, and they would like to have this solved. If you're afraid to visit their site again you can probably try sending emails to info@, webmaster@ and root@ for their domain. One of these usually works (and spammers are well aware of this unfortunately).
     
    Campbell Ritchie
    Sheriff
    Pie
    Posts: 48968
    60
    • Mark post as helpful
    • send pies
    • Quote
    • Report post to moderator
    In view of the nature of this message, I would be happy to make an exception to the policies about multiple posts.
     
    Darryl Burke
    Bartender
    Posts: 5126
    11
    Java Netbeans IDE Opera
    • Likes 1
    • Mark post as helpful
    • send pies
    • Quote
    • Report post to moderator
    I have received the following email from info[at]java2s.com in response to my mail alerting them to the issue.

    db

    Hi db,

    Thanks for your alert. Totally 11 entries from Sygem have been removed and the site is updated. Please check.

    Thanks again for your time and kindness
     
    Campbell Ritchie
    Sheriff
    Pie
    Posts: 48968
    60
    • Mark post as helpful
    • send pies
    • Quote
    • Report post to moderator
    Well done
     
    • Post Reply
    • Bookmark Topic Watch Topic
    • New Topic