Skip to main content
Skip to main content
Published Jul 16, 2012 | Updated Sep 15, 2017

TrojanDownloader:Java/OpenStream.BY

Detected by Microsoft Defender Antivirus

Aliases: Exploit.Java.CVE-2012-0507.bu (VirusBuster) Exploit.Java.CVE-2012-0507.ni (Kaspersky) Exploit-CVE2012-1723 (McAfee) Java/Exploit.CVE-2012-1723.J (ESET) Trojan.Maljava (Symantec)

Summary

Windows Defender Antivirus detects and removes this threat. 

This threat uses a Java vulnerability to download and run files on your PC, including other malware.

It runs when you visit a hacked or malicious website and you have a vulnerable version of Java.

The following versions of Java are vulnerable:

  • JDK and JRE 7 Update 4 and earlier Java SE
  • JDK and JRE 6 Update 32 and earlier Java SE
  • JDK and JRE 5.0 Update 35 and earlier Java SE
  • SDK and JRE 1.4.2_37 and earlier Java SE

To check if you're running a vulnerable version of Java:

  1. In Control Panel, double-click Programs.
  2. If Java is installed you will see it in the list of installed programs. Click it to open the Java Control Panel.
  3. On the General tab, click About to see which version of Java you have installed.

You may get an alert about this threat even if you're not using a vulnerable version of Java. This is because we detect when a website tries to use the vulnerability, even if it isn't successful.

There is more information on the vulnerability that this threat uses in the Exploit:Java/CVE-2012-1723 description.

The following free Microsoft software detects and removes this threat: 

Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.

You can also visit the Microsoft virus and malware community for more help.

Update Java

Make sure you install all available Java updates. You can read more about this vulnerability and download software updates from these links:

You should remove older versions of Java, as keeping old and unsupported versions of Java on your PC is a serious security risk:

If you continue to get alerted about this threat, deleting your temporary Java files can help:

It's also important to keep your other software up to date:

Follow us