Published Feb 20, 2013|Updated Sep 15, 2017


Severe |Detected with Windows Defender Antivirus

Aliases: Java/Exploit.Agent.NIF trojan (ESET) Troj/JavaDl-SA (Sophos) JV/Blacole-FET!29A92C3EEDD7 (McAfee) Exploit-FET!CVE2013-0431 (McAfee) Troj/JavaDl-UG (Sophos) Trojan.Maljava (Symantec) JV/Blacole-FET!29A92C3EEDD7 (McAfee) Exploit-FET!CVE2013-0431 (McAfee) Exploit.CVE2013-0422.13 (Dr.Web) Exploit-FET!Exploit-JAR (McAfee) Mal/JavaJar-B (Sophos) JV/Blacole-FHA!949BD2B7DE14 (McAfee) Troj/JavaDl-FC (Sophos) JAVA_EXPLOYT.BU (Trend Micro) RDN/Generic Exploit!1mz (McAfee) Troj/JavaDl-UL (Sophos) Exploit.Java.458 (Dr.Web) JV/Blacole-FHA!D0BA98FA1FE3 (McAfee) Exploit.Java.461 (Dr.Web) JV/Blacole-FHA!23C205BE86D0 (McAfee) Java/Exploit.Agent.NLX trojan (ESET) JAVA_EXPLOIT.WT (Trend Micro)


Windows Defender  detects and removes this threat.

This threat uses a Java vulnerability to download and run files on your PC, including other malware.

It runs when you visit a hacked or malicious website and you have a vulnerable version of Java.

The following versions of Java are vulnerable:

  • Java Development Kit, Java Runtime Environment 7 Update 11 and earlier

To check if you're running a vulnerable version of Java:

  1. Go to the control panel (Select Start then Control Panel)
  2. Select Programs. If Java is installed you will see it in the list of installed programs. Click it to open the Java Control Panel.
  3. On the General tab, click About to see which version of Java you have installed.

You might get an alert about this threat even if you're not using a vulnerable version of Java. This is because we detect when a website tries to use the vulnerability, even if it isn't successful.


Latest news