FYI: Latest Java update, 2012-003 includes removal tool

Question

nerowolfe Author

Level 6

13,090 points

FYI: Latest Java update, 2012-003 includes removal tool

I just noticed that a new Java update is available via Software Update -

2012-003

It includes a removal tool!

It reads as follows:

This Java security update removes the most common variants of the Flashback malware.

This update also configures the Java web plug-in to disable the automatic execution of Java applets. Users may re-enable automatic execution of Java applets using the Java Preferences application. If the Java web plug-in detects that no applets have been run for an extended period of time it will again disable Java applets.

This update is recommended for all Mac users with Java installed.

For details about this update see: http://support.apple.com/kb/HT5242

MacBook Pro (17-inch 2.4 GHz), Mac OS X (10.7.3)

Posted on Apr 14, 2012 10:38 AM

Reply

Answer 1

Apr 14, 2012 10:55 AM in response to nerowolfe

Apple has also made the malware removal tool available as a standalone installer for Lion users who neither have nor wish to install Java.

Reply

Answer 2

Apr 14, 2012 10:55 AM in response to Topher Kessler

Here: http://support.apple.com/kb/DL1517

Reply

Answer 3

nerowolfe Author

Level 6

13,090 points

Apr 14, 2012 11:43 AM in response to Topher Kessler

Topher, if one does not have Java installed, then there is no reason for a Java malware removal tool, since there cannot be any Java malware. Or am I missing something?

Reply

Answer 4

Apr 14, 2012 11:58 AM in response to nerowolfe

Older variants of the malware did not require Java to infect a system, and instead ran as fake Flash installers. The malware itself is not Java based, only the recent hack to get the downloader written to the filesystem and executed is a Java-based hack. Because of this, while Apple's removal tools and updates do help against some situations, they dont help all users of OS X who could be affected by this malware via other means than the most recent Java-based variants.

Reply

Answer 5

nerowolfe Author

Level 6

13,090 points

Apr 14, 2012 12:07 PM in response to Topher Kessler

Thank you Topher, you answered my last question, "Am I missing something" and obviously I was.

Reply

Answer 6

frazzm737

Level 9

55,098 points

Apr 14, 2012 2:37 PM in response to Topher Kessler

Thank you--I also was puzzled by the need for the removal tool, if Java is not installed on the machine. Now I understand.

Reply