Sign in to follow this  
Followers 0
ajohnson0216

not-a-virus:WebToolbar.Win32.Asparnet.lx on java_sp.dll

13 posts in this topic

Hi,

 

This virus is showing on 2 of our Servers.

The result from Kaspersky is "Object not disinfected. Reason: writing is not supported. Object name: java_sp.dll/​/​data0001.res"

 

I have googled this but cannot find any information on this virus.

 

Need to get this cleaned up asap as one of the servers is our VCenter Box.

 

Please assist.

 

Share this post


Link to post
Share on other sites

1. Please post the full, complete detection details. File name, path, location.

 

2. Please see: Kaspersky Lab Forum > English User Forum > Virus-related issues > the second (2nd) Important topic.

There, you will find instructions for GSI and AVZ logs.

 

Please see the small print that is located at the bottom of this message.

Share this post


Link to post
Share on other sites
1. Please post the full, complete detection details. File name, path, location.

 

2. Please see: Kaspersky Lab Forum > English User Forum > Virus-related issues > the second (2nd) Important topic.

There, you will find instructions for GSI and AVZ logs.

 

Please see the small print that is located at the bottom of this message.

 

Attached is the full detail.

 

I'll run GSI here in a moment.

 

post-608573-1493904884.png

Share this post


Link to post
Share on other sites
1. Please post the full, complete detection details. File name, path, location.

 

2. Please see: Kaspersky Lab Forum > English User Forum > Virus-related issues > the second (2nd) Important topic.

There, you will find instructions for GSI and AVZ logs.

 

Please see the small print that is located at the bottom of this message.

 

Here is the KL_SYScure file,

the GSI is too big for your forum. its 6mb, you only allow 300k

KL_syscure.zip

Share this post


Link to post
Share on other sites

java_sp.dll/​/​data0001.res is not showing up in your logs.

 

Any clue where this file path/location is?

 

This could be maybe a false positive, or it may be part of a unwanted browser toolbar.

 

 

Share this post


Link to post
Share on other sites
java_sp.dll/​/​data0001.res is not showing up in your logs.

 

Any clue where this file path/location is?

 

This could be maybe a false positive, or it may be part of a unwanted browser toolbar.

 

 

I checked the browsers, no toolbars. And the path makes no sense to me either.

If this is a false-positive, is there anyway to stop this from blowing up my daily report? Its showing the same listing on both servers close to 2000 times, which really muddies up my reporting.

 

Thanks

Share this post


Link to post
Share on other sites

Please send detected file to the Lab, instructions are located in the third important topic located near the top of the Virus section of this forum. And here:

http://forum.kaspersky.com/index.php?showtopic=13881

 

Please send the .exe to KL VirusDesk,

if verdict in Infected [or Clean], click on Disagree button, and file will be sent as a [non] false positive to KL analysts, also You can give Your email address to get the final verdict,

Share this post


Link to post
Share on other sites
Please send detected file to the Lab, instructions are located in the third important topic located near the top of the Virus section of this forum. And here:

http://forum.kaspersky.com/index.php?showtopic=13881

 

 

Thats the thing, I cannot find the file.... Kaspersky says its infected but I have no idea where "Java_sp.dll" exists.

Share this post


Link to post
Share on other sites

Please download AdwCleaner and save it on your Desktop.

 

Right click the file that you saved and Run as administrator, press the Scan button and wait for the scan to complete.

 

When the scan is complete, the report will be saved in the following location: C:\AdwCleaner\AdwCleaner[S0].Txt

 

Please attach AdwCleaner[S0].Txt to your next post.

Share this post


Link to post
Share on other sites
Please download AdwCleaner and save it on your Desktop.

 

Right click the file that you saved and Run as administrator, press the Scan button and wait for the scan to complete.

 

When the scan is complete, the report will be saved in the following location: C:\AdwCleaner\AdwCleaner[S0].Txt

 

Please attach AdwCleaner[S0].Txt to your next post.

 

attached... Not much in there.

AdwCleaner_S0_.txt

Share this post


Link to post
Share on other sites

Yes, not much more, let's see.

 

Close all browsers, then re-run AdwCleaner by right click > Run as administrator, check all detected, then click Clean and wait until removal is complete > reboot.

The report will be saved in the following location: C:\AdwCleaner\AdwCleaner[C0].Txt.

Attach the report to your next post.

 

 

Scan with Malwarebytes' Anti-Malware Free: https://www.malwarebytes.com/mwb-download/ Update it first, scan and attach its detection log, but Please Don't remove anything yet, until the log is reviewed.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0