Trojan ByteVerify Question

Trojan ByteVerify Question

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Trojan ByteVerify Question george 12-09-2007
Posted by george on December 9, 2007, 6:40 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi All
My Norton Security picked 4 trojans ByteVerify and resolved the issue when I
did full system scan, but I am worried as to what damage this could have
done to my pc. I am surprised that I got it in the first place, as Norton is
set up to automatically scan any incomming data...Info on this trojan is
very ambigous on Symmantec web site - I run Windows xp, would this Trojan
have picked up my passwords? Would it let hhackers use my pc? What exactly
does it do?




Posted by Sebastian G. on December 9, 2007, 6:48 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
george wrote:

> Hi All
> My Norton Security picked 4 trojans ByteVerify and resolved the issue when I
> did full system scan, but I am worried as to what damage this could have
> done to my pc.


Well, since this Norton stuff is supposed to cause damage, why would you care?

> Info on this trojan is very ambigous on Symmantec web site


Hm? ByteVerify is an exploit for the class format verifier of the Java
ClassLoader of super old Sun JavaVM 1.2.4.

Posted by george on December 10, 2007, 1:32 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

> george wrote:
>
>> Hi All
>> My Norton Security picked 4 trojans ByteVerify and resolved the issue
>> when I did full system scan, but I am worried as to what damage this
>> could have done to my pc.
>
>
> Well, since this Norton stuff is supposed to cause damage, why would you
> care?
>
>> Info on this trojan is very ambigous on Symmantec web site
>
>
> Hm? ByteVerify is an exploit for the class format verifier of the Java
> ClassLoader of super old Sun JavaVM 1.2.4.

That's exactly unhelpful response you could find on Symmantec, but what does
byteverify do to your machine?



Posted by Sebastian G. on December 10, 2007, 1:55 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
george wrote:


>> Hm? ByteVerify is an exploit for the class format verifier of the Java
>> ClassLoader of super old Sun JavaVM 1.2.4.
>
> That's exactly unhelpful response you could find on Symmantec, but what does
> byteverify do to your machine?


If you're running Sun's Java VM 1.2.4 or older: it will allow the attacker
to execute arbitrary code, which will do about virtually anything.

If you're not so horribly stupid and run a newer version of Sun's JavaVM, a
Java VM of another vendor, or simply none at all, the exploit fails and
doesn't execute anything malicious. Thus, nothing happens.

It's really a wonder that such super-old exploits are still in use.

Posted by george on December 11, 2007, 6:43 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

> george wrote:
>
>
>>> Hm? ByteVerify is an exploit for the class format verifier of the Java
>>> ClassLoader of super old Sun JavaVM 1.2.4.
>>
>> That's exactly unhelpful response you could find on Symmantec, but what
>> does byteverify do to your machine?
>
>
> If you're running Sun's Java VM 1.2.4 or older: it will allow the attacker
> to execute arbitrary code, which will do about virtually anything.
>
> If you're not so horribly stupid and run a newer version of Sun's JavaVM,
> a Java VM of another vendor, or simply none at all, the exploit fails and
> doesn't execute anything malicious. Thus, nothing happens.
>
> It's really a wonder that such super-old exploits are still in use.

Right - my machine is about a year old, o/s windows xp, it runs java 1.5;
how could I possibly have byteverify in the first place? Whatever peoples
oppinions are on Norton security, it is still one of market leaders and as
such you'd expect it to prevent you getting this old trojan?



Similar ThreadsPosted
WS Trojan Scanner March 30, 2005, 7:14 am
Strange behavior ... New trojan? May 6, 2004, 7:57 am
trojan horse Canada December 1, 2004, 8:07 pm
World Cup email is a Trojan May 30, 2006, 3:27 pm
Re: Trojan from using VNC Viewer Software April 2, 2007, 5:38 am
Help me,my computer maybe at risk with some trojan. April 9, 2008, 12:43 pm
Trojan hides in 'Amazon' email May 30, 2006, 3:31 pm
Fake Microsoft emails hide Trojan spy May 30, 2006, 3:25 pm
TROJAN-HORSE ATTACKS INCREASING, HITTING U.S., WORLDWIDE June 25, 2005, 3:59 pm
Uninstalled anti-trojan s/w still preventing access for basic operations? October 24, 2005, 1:05 pm

The site map in XML format XML site map

Contact Us | Privacy Policy