MS Java VM patch?

My computer is three years old. It came with Windows XP Home and of course IE 6. I rarely use IE except for critical updates. I have Spybot and Ad-aware and keep them updated and run them regularly. I use both Opera and Firefox as my primary browsers and both block pop-ups. So... the problem.

I downloaded and installed CW Shredder and it found one piece of spyware which it removed. It had to do with MS Java Virtual Machine. It said to prevent re-infection to either: download and install SP1a (I have SP1 installed already), delete MS Java VM or patch it. But I use the Java which came with Opera (the latest Java program). So, should I install this patch and where do I find it? And how would I know which patch was right for this particular VM? Thanks.

 

The latest version of Java VM is 3810 and according to => http://www.microsoft.com/technet/security/bulletin/MS03-011.mspx you should be able to get the latest update from Windows Update page.

If you need this update and it is not available to you under Critical Updates you can try...

- Got to Windows Update
- In left-Hand pane click on "Personalize Windows Update "
- In right-hand pane, under "Set options for Windows Update " select/check "Display the link to the Windows Update Catalog under See Also "
- Click "Save Settings "
- Now in the left-hand pane, under "See Also ", you will now see "Windows Update Catalog "...select it
- In right-hand pane select/click "Find updates for Microsoft Windows Operating systems "
- In right-hand pane select/highlight "Windows XP SP1 " then click "Search " button
- In right-hand pane select/highlight "Critical Updates and Service Packs "...list should appear in about 5 secs
- Look for "816093: Security Update Microsoft Virtual Machine (Microsoft VM) - (Posted Date: November 04, 2003) "
- Once you find it click "Add " button then select/click "Go to Download Basket "
- Select a download location (I have a folder on my C: Drive called Downloads and everythng I download I point to that folder) then click "Download Now " button
- Once complete you should have a folder called "WU " in your download location...the patch is in a folder under "WU " folder

If this does not work you can try this link to get MSJVM => http://www.windowsbbs.com/showthread.php?t=32930&highlight=Java+Machine

I, myself use Sun's Java 1.4.2_05 instead which is the latest from Sun

HTH

 

thanks but...

I really appreciate all the time you took to give me explicit and specific directions. The question is... given the fact that I also use the latest Java from Sun (through my Opera and Mozilla installations I included Sun's Java), do I still need to patch the MS Java VM? Thanks.

 

do I still need to patch the MS Java VM?

In general, if you have a product on your PC and there is an available patch, you should get and apply the patch. This is true for even applications you have but never use since some malware may be written to use them without your noticing.

 

Newt,

Just curious, for those of us who use the SunJava plugin for Netscape/Mozilla/Opera, I note that there is an uninstall guideline on the Windows-Help.NET, Windows XP How To's for uninstalling MSJVM, and installing SunJava's plugin (Remove Microsoft Java Virtual Machine and Install Sun Javaâ„¢). In light of the fact that Microsoft has removed its Java Virtual Machine (JVM) from the Windows XP Service Pack 1a (SP1a) would it not be better to uninstall the MSJVM, rather than to update?

Ramona

 

I decided to follow Ramona's advice and after visiting the site (from her post) I deleted MS Java VM entirely.