Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Updated to 10.9.4 (Mavericks). Now a fake 'java' update request keeps popping up.

Howdy! I updated my MacBook Pro recently to 10.9.4 (Mavericks). Update went fine, except for one issue.


Several times a day since the update, a Software Update window pops up prompting me to install an update to run 'java.' See the attached screen capture image.


As you can see, it looks pretty fishy. For one thing, there's no "decline" option: simply "Not Now" or "Install." For another, they couldn't even capitalize "java." And Software Updates claims that all of my programs are up to date.


I'm assuming this is some kind of virus/malware. But, scans of my computer don't show anything nefarious installed on my machine.


I keep hitting "Not Now" every time this window pops up. But, I'm afraid one day I'll accidentally hit "Install" (especially since it pops up without warning). Any suggestions or advice on how to deal with this?


Thanks!User uploaded file

Posted on Jul 9, 2014 10:16 AM

Reply
5 replies

Jul 9, 2014 11:04 AM in response to jimmyjam!

This is a legit alert, shown by Mac OS X when a Java app is opened without having Java installed. Most likely, you upgraded to Mavericks from some older system that had Java installed. Installing a major Mac OS X upgrade these days results in Java being removed, so any Java app that might be part of some other software you're using would have worked fine then, but isn't working now. The trick is figuring out what that might be.


The fact that the process is named "java" doesn't necessarily mean that it's malicious. Many legit apps include sloppily-named components that the developers think the user will never see.


Next time it appears, make note of the time and look in the Console for Java-related messages appearing at the same time. You may get a clue as to what is triggering this message.

Jul 9, 2014 7:37 PM in response to jimmyjam!

This procedure is a diagnostic test. It makes no changes to your data.

Please triple-click anywhere in the line below on this page to select it:

find /[AL]* -type d -name *.app -prune -exec sh -c 'ls -R "$1" | grep -q \.jar\$' {} {} \; -print0 2>&- | xargs -0 basename -s .app | pbcopy

Copy the selected text to the Clipboard by pressing the key combination command-C.

Launch the built-in Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.

Paste into the Terminal window by pressing the key combination command-V. I've tested these instructions only with the Safari web browser. If you use another browser, you may have to press the return key after pasting.

Wait for a new line ending in a dollar sign ($) to appear below what you entered.

The output of the command will be automatically copied to the Clipboard. If the command produced no output, the Clipboard will be empty. Paste into a reply to this message.

The Terminal window doesn't show the output. Please don't copy anything from there.

Jul 10, 2014 3:42 AM in response to thomas_r.

thomas_r. wrote:


This is a legit alert, shown by Mac OS X when a Java app is opened without having Java installed. Most likely, you upgraded to Mavericks from some older system that had Java installed. Installing a major Mac OS X upgrade these days results in Java being removed, so any Java app that might be part of some other software you're using would have worked fine then, but isn't working now. The trick is figuring out what that might be.


The fact that the process is named "java" doesn't necessarily mean that it's malicious. Many legit apps include sloppily-named components that the developers think the user will never see.


Next time it appears, make note of the time and look in the Console for Java-related messages appearing at the same time. You may get a clue as to what is triggering this message.


Actually in this case Java is a Unix layer component and executables in Unix generally have lowercase names. Java is therefore an executable normally located at


/usr/bin/java


(Notice the fact it is lowercase.)


Something that wants to run Java code is trying to use java at this standard location and as others have mentioned java is not installed as standard any more and when you upgrade it is usually removed. Apple have however put a check in place so that when some software tries to use it if it is not installed it triggers this dialog box. (The same thing happens with X11 software.)


Software that might want to legitimately use java includes Symantec Anti-Virus for Mac (a really stupid idea for anti-virus software), Various SSL VPN clients, and some installer packages. However installer packages would not automatically be running repeatedly unless the original poster has a system to auto-install stuff. It is somewhat surprising and unhelpful that Apple do not indicate which software triggers the message.

Updated to 10.9.4 (Mavericks). Now a fake 'java' update request keeps popping up.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.