Posted 15 February 2011 - 12:47 PM
Hey first time posting...
For the past few months I've been getting viruses/fake anti-virus programs on my computer by simply browsing the web (no sketchy sites or anything like that). Anyway, these files usually end up in my Temp folder, which I delete manually (sometimes use Rkill to end the process) and when I scan with Malwarebytes, I usually find an Hkey infection.
It's come to my attention that these viruses (or trojans) download as .exe files when I open websites, and during each occurrence a version of Java that I've never seen before opens. I'm not sure if this is "open stream," but I'm wondering; is my version of Java infected and causing backdoor attacks? Or is there some file that my scans aren't detecting that's causing Java to open and download viruses?
The .exe files are never the same, but typically install a similar program that replicates an anti-virus program that messes up my firefox validation and denies access to other files on my pc