Java v JavaScript

[J_townSonny]

Here is my question, in a not so vague form: I went to Java.com to check what version I had and it said it wasn't working. Hmm? This is my question: I have recieved a promt for a Java update J6 U37 and nothing matches what I have, let alone a non-working(?) installed version (http://www.oracle.co...es-1863283.html). The update I found was J6 U38 doing a Google search. I have heard that J6 U37 was a virus written to fool users. My old boss just had J7 U9 uninstalled because it kept freezing after installiation so that version is not an option for me either. Do I need to uninstall what I have and download J6U38 b01 or just click the update? Why has this become sooo complicated? I checked my system (Win XP Home 2002 SP3) and here is the path I found with what is installed currently: C:\Java\jre1.6.0_05\bin-File version 6.0.50.13. I hope this is a little clearer.

[daledoc1]

Hi:

Java and Javascript are not the same thing:

http://wiki.answers.com/Q/What_are_the_differences_between_java_and_JavaScript

http://en.wikipedia.org/wiki/JavaScript

http://en.wikipedia.org/wiki/Java_%28programming_language%29

However, both of them can be used for malware purposes.

For "Java" (aka Java Runtime Environment, aka JRE), it is most critical to keep it fully updated, IF one needs to keep it installed on one's system at all.

(Because it is so commonly exploited for malware, experts recommend uninstalling it altogether from one's computer, if one doesn't need it to run certain programs.)

All older versions of JRE should be uninstalled from one's system, so that only the current, most secure version is installed.

There is a tool to help with that: http://forums.malwar...howtopic=108966

The only legitimate, safe place to obtain the current Java version, & to test one's system for the JRE version it's running is at Oracle's site: http://www.java.com/en/

There are 2 major versions in public release JRE 6 and JRE 7 -- the version to run depends on a number of factors for a particular computer.

Whichever version you run, you must keep it updated, either through auto-updates within the Java program itself, via periodic checks at java.com, via a program such as Secunia PSI, which monitors all your programs for security vulnerabilites & updates, or by some other means.

Refer to ShyWriter's very recent post with links for updating both 6 and 7: http://forums.malwar...showtopic=82617

As for Javascript, in addition to one's anti-virus & anti-malware programs, it's important to use script-blocking extensions (add-ons) for one's browser(s), such as NoScript. These can help to protect your computer from malicious scripts on web pages.

If you search the forum here, you'll find many more informative posts by MBAM staff and expert members that explain all this better than I can.

Bottom line:

If you don't need it, completely uninstall Java Runtime Environment (aka JRE aka Java) from your computer, along with all its temporary files & remnants, etc.

If you do need it, keep whichever version you are running (either 6 or 7) fully updated at all times, and remove all older versions.

For Javascript, install script-blocking extensions in your browsers to help protect against malicious scripts on webpages.

HTH,

daledoc1

[J_townSonny]

Thanks for your info. I'll get to this tomorrow around 7p since I have a shopload of cars to get done. If I run into any problems I know Exactally where to go....Right Here.