JAVA Updates
First: If you go to JAVA.com and click the big red button and download and install the newest update you will block the malware exploit that has infected many computers.
Second: Are you free and safe? Not so fast. While it has been verified by leading security experts that the newest version of the software does stop the JAVA exploit from executing, you are not out of the woods yet. By making the fast repairs they may have opened a new hole that experts are saying could cause a problem. Read the whole story here.http://www.informationweek.com/security/vulnerabilities/oracle-emergency-java-patch-opens-fresh/240006756
Third: How does this work? In this malware case, it is being spread with a Fake Microsoft or QuickBooks or Outlook email. Microsoft has sent out real emails with the new terms of service agreement and They have copied the email and replaced the real Microsoft Links with links to the infected servers that then takes advantage of JAVA in your browser to access your computer. The same with QuickBooks, the email will say that there is an immediate update for QuickBooks and when you click to install it you get infected.
Fourth: If you are running a WordPress blog or web site you may need to see if your WordPress files are hosting the Blackhole toolkit that could be infecting visitors. Click here to do this: http://sitecheck.sucuri.net/scanner/
Fifth: What should you do? Disable JAVA in your browser. I would not remove JAVA from your computer. You may have programs that run on JAVA and it would also disable those programs if you remove JAVA. Just disable it in your browser Here is how:
In Firefox: Press Firefox button -> Add-ons, go to Plugins and click the “Disable” button next to anything named “Java”.
In Chrome: Type in: “chrome://plugins/” into the address bar (no speech marks). Scroll down to Java and click disable.
In Opera: Type in “opera:plugins” into the address bar (no speech marks). Scroll down to:
- Java(TM) Platform <click on> Disable.
- Java Deployment Toolkit <click on> Disable.
In Internet Explorer: Tools (Menu/Drop Down Menu From Top) > Internet Options > Programs > Manage Addons > Java Plugin > Disable > “OK” Close your browser and restart.
For Mac users:
System Wide: Click Go and Applications then Utilities then Java Preferences. Make sure your 64 or 32 versions are 1.6.0, if they are you are ok, if they are 1.7 you should make sure they are disabled. Make sure the box at the top of the page is un-ticked. Then on the Advanced tab make sure the Do not start Console bullet is ticked.
Safari: Click Preferences, and then the Security tab (uncheck “Enable Java”).
Google Chrome: Open Preferences, and then type “Java” in the search box. Scroll down to the Plug-ins section, and click the link that says “Disable individual plug-ins.” If you have Java installed, you should see a “disable” link underneath its listing.
Firefox: Click Tools, Add-ons, and disable the Java plugin(s).