{"id":2367,"date":"2014-10-25T12:30:04","date_gmt":"2014-10-25T12:30:04","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=2367"},"modified":"2018-05-29T12:01:56","modified_gmt":"2018-05-29T12:01:56","slug":"warning-java-outdated-security-risks-update","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/warning-java-outdated-security-risks-update\/","title":{"rendered":"&#8220;WARNING!!! Your Java Version is Outdated, Have Security Risks, Please Update Now!&#8221;"},"content":{"rendered":"<p>Are you getting messages or pop-ups while browsing the web saying:<\/p>\n<blockquote><p>&#8220;The page at http:\/\/s.mjytsw com says: WARNING!!! Your Java Version is Outdated, Have Security Risks, Please Update Now!&#8221;<\/p><\/blockquote>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Your-Java-Version-is-Outdated.png\"><img loading=\"lazy\" class=\"aligncenter wp-image-2368 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Your-Java-Version-is-Outdated.png\" alt=\"WARNING!!! Your Java Version is Outdated, Have Security Risks, Please Update Now!\" width=\"368\" height=\"219\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Your-Java-Version-is-Outdated.png 368w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Your-Java-Version-is-Outdated-300x178.png 300w\" sizes=\"(max-width: 368px) 100vw, 368px\" \/><\/a><\/p>\n<p>When I got this message I was redirected to a &#8220;Java Update&#8221;. The update was digitally signed by a company called <a title=\"Fileangels \u2013 Detected as IBryte and OptimunInstaller\" href=\"http:\/\/www.freefixer.com\/b\/fileangels-publisher\/\">Fileangels<\/a>, so it&#8217;s clearly not an official Java update. The Fileangels file is detected by some of the anti-virus programs at <a href=\"http:\/\/www.freefixer.com\/b\/scan-files-for-viruses-virustotal\/\">VirusTotal<\/a>. A real Java update should be digitally signed by the company that owns Java, that is\u00a0<strong>Oracle America,\u00a0Inc.<\/strong><\/p>\n<p>I got these faked Java warnings while browsing with Firefox, but they can probably also appear if you are using Chrome or Internet Explorer as you web browser.<\/p>\n<p>So, why are you getting these faked Java Update pop-ups? Most likely you have some adware installed on your machine. When I got these ads, I had lots of adwares installed on my lab machine. After removing them with <a title=\"About FreeFixer\" href=\"http:\/\/www.freefixer.com\/b\/about-freefixer\/\">FreeFixer<\/a>, the\u00a0&#8220;Java Update&#8221; pop-ups stopped. These where the adware programs I had and uninstalled: <a title=\"Browser Warden Ads \u2013 Removal Instructions\" href=\"http:\/\/www.freefixer.com\/b\/remove-browser-warden\/\">Browser Warden<\/a>,\u00a0<a title=\"Remove \u201cpowered by SmartOnes\u201d Ads\" href=\"http:\/\/www.freefixer.com\/b\/remove-powered-by-smartones-ads\/\">SmartOnes<\/a>,\u00a0<a title=\"TinyWallet \u2013 Removal Instructions\" href=\"http:\/\/www.freefixer.com\/b\/remove-tinywallet\/\">TinyWallet<\/a>,\u00a0<a title=\"Ads By BlockAndSurf \u2013 Removal Instructions\" href=\"http:\/\/www.freefixer.com\/b\/ads-by-blockandsurf-removal\/\">BlockAndSurf<\/a>,\u00a0<a title=\"Remove HQ-Video-Pro-2.1cV22.10 Ads\" href=\"http:\/\/www.freefixer.com\/b\/remove-hq-video-pro-2-1cv22-10-ads\/\">HQ-Video-Pro-2.1c<\/a>.<\/p>\n<p>To remove these faked Java warnings I would begin to examine the <strong>Add\/Remove programs dialog<\/strong> in the <strong>Control Panel<\/strong> to see if something suspicious is listed there and remove it. Do you see some program that you don&#8217;t remember installing? If you sort the programs on the &#8220;Installed On&#8221; date, do you see anything that was installed approximately about the same time as you first noticed\u00a0the &#8220;Java&#8221; warnings?<\/p>\n<p>I think you should also check the <strong>add-ons<\/strong> installed into <strong>Chrome<\/strong>, <strong>Firefox<\/strong>, <strong>Internet Explorer<\/strong>. Do you see anything suspicious? Something that you don&#8217;t remember installing?<\/p>\n<p>If that did not fix the problem, you can give\u00a0<a title=\"About FreeFixer\" href=\"http:\/\/www.freefixer.com\/b\/about-freefixer\/\">FreeFixer<\/a>\u00a0a try. It&#8217;s\u00a0a tool that I&#8217;ve been working on for some time now. FreeFixer is designed to help you manually identify and remove unwanted software, such as the adware that&#8217;s running on your machine. FreeFixer\u00a0scans the processes running on your computer, browser add-ons, startups, scheduled tasks, recently modified files, and\u00a0<a href=\"http:\/\/www.freefixer.com\/manual.html#scanlocations\">lots of other locations<\/a>. FreeFixer is freeware and\u00a0its removal feature is not crippled liked many other malware removers out there. If FreeFixer solved your problem, please help me spread the word and let your friends know about it.<\/p>\n<p><strong>Tip<\/strong>: If you are having difficulties to figure out whether a file or setting in FreeFixer&#8217;s scan result is legitimate or if it should be removed, please check out the information shown on the\u00a0<strong>More Info<\/strong>\u00a0page. It will show a VirusTotal report which can be quite useful when trying to determine whether to keep or remove a file.<\/p>\n<figure id=\"attachment_2498\" aria-describedby=\"caption-attachment-2498\" style=\"width: 604px\" class=\"wp-caption alignnone\"><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/freefixer-more-info-blockandsurf.png\"><img loading=\"lazy\" class=\"wp-image-2498 size-large\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/freefixer-more-info-blockandsurf-1024x333.png\" alt=\"Click the More Info links to get a VirusTotal report about the file.\" width=\"604\" height=\"196\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/freefixer-more-info-blockandsurf-1024x333.png 1024w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/freefixer-more-info-blockandsurf-300x97.png 300w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/freefixer-more-info-blockandsurf.png 1191w\" sizes=\"(max-width: 604px) 100vw, 604px\" \/><\/a><figcaption id=\"caption-attachment-2498\" class=\"wp-caption-text\">The &#8220;More Info&#8221; links in FreeFixer. Click for full size.<\/figcaption><\/figure>\n<p>Which adware programs did you have to uninstall to get rid of the\u00a0&#8220;Java Update&#8221; warnings?<\/p>\n<p>And if you are looking for the real Java download, go to the official Java site:\u00a0<a href=\"https:\/\/www.java.com\/en\/\">https:\/\/www.java.com\/en\/<\/a><\/p>\n<p>Thanks for reading.<\/p>\n<p><strong>Update 2014-10-26<\/strong>: These <strong>fake Java warnings<\/strong> are still going on. Found the same type of pop-up, but this time it mentions another web site:\u00a0<strong>d.andoie.com<\/strong>. What web site does your \u00a0warning message mention?<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/d.andoie.com-pop-up.png\"><img loading=\"lazy\" class=\"alignnone wp-image-2421 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/d.andoie.com-pop-up.png\" alt=\"d.andoie.com fake java warning pop-up\" width=\"309\" height=\"78\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/d.andoie.com-pop-up.png 309w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/d.andoie.com-pop-up-300x75.png 300w\" sizes=\"(max-width: 309px) 100vw, 309px\" \/><\/a><\/p>\n<p>When clicking on the warning message, the faked Java site at <strong>phohyt.com<\/strong> opens up. Is this the site you are redirected to as well?<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/phohyt.com-fake-java-site.png\"><img loading=\"lazy\" class=\"alignnone wp-image-2422 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/phohyt.com-fake-java-site.png\" alt=\"phohyt.com fake java site\" width=\"847\" height=\"606\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/phohyt.com-fake-java-site.png 847w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/phohyt.com-fake-java-site-300x214.png 300w\" sizes=\"(max-width: 847px) 100vw, 847px\" \/><\/a><\/p>\n<p><strong>Update 2014-10-27<\/strong>: The pop-ups are still appearing. Now they mention <strong>d.mobcgm.com<\/strong> and <strong>d.mobdty.com<\/strong>. If clicking the OK button in the dialog,\u00a0<strong>apprfv.com<\/strong>\u00a0opens up containing a faked java update site.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/d.mobcgm.com-pop-up.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-2438\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/d.mobcgm.com-pop-up.png\" alt=\"d.mobcgm.com pop-up\" width=\"259\" height=\"77\" \/><\/a>\u00a0<a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/d.mobdty.com-fake-java.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-2459\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/d.mobdty.com-fake-java.png\" alt=\"d.mobdty.com fake java\" width=\"251\" height=\"66\" \/><\/a><\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/s4.apprfv.com-site.png\"><img loading=\"lazy\" class=\"alignnone size-large wp-image-2460\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/s4.apprfv.com-site-1024x442.png\" alt=\"s4.apprfv.com site\" width=\"604\" height=\"260\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/s4.apprfv.com-site-1024x442.png 1024w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/s4.apprfv.com-site-300x129.png 300w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/s4.apprfv.com-site.png 1034w\" sizes=\"(max-width: 604px) 100vw, 604px\" \/><\/a><\/p>\n<p><strong>Update 2014-10-30<\/strong>: These fake Java warnings and faked Java sites are still popping up. Today the pop-up mention <strong>www.qposwe.com<\/strong>\u00a0and <strong>debajxcj.com<\/strong> and the faked site is hosted at <strong>irzsmdcs.com<\/strong>:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/debajxcj.com-warning.png\"><img loading=\"lazy\" class=\"alignleft wp-image-2528 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/debajxcj.com-warning.png\" alt=\"debajxcj.com warning\" width=\"305\" height=\"63\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/debajxcj.com-warning.png 305w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/debajxcj.com-warning-300x61.png 300w\" sizes=\"(max-width: 305px) 100vw, 305px\" \/><\/a><\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/www.qposwe.com-warning.png\"><img loading=\"lazy\" class=\"alignnone wp-image-2508 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/www.qposwe.com-warning.png\" alt=\"www.qposwe.com warning\" width=\"304\" height=\"63\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/www.qposwe.com-warning.png 304w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/www.qposwe.com-warning-300x62.png 300w\" sizes=\"(max-width: 304px) 100vw, 304px\" \/><\/a><\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/www.qposwe.com-warning.png\"><img loading=\"lazy\" class=\"alignnone wp-image-2506 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/irzsmdcs.com-fake-java-site.png\" alt=\"irzsmdcs.com fake java site\" width=\"237\" height=\"180\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><strong>Update 2014-11-11<\/strong>: This is still going on. <strong>zpkaid.com<\/strong> is used host the fake Java Update site. The title of the page is &#8220;Update for Your Computer&#8221; and the download is signed by <a title=\"Safe Down \u2013 22% Detection Rate \u2013 Detected as IBryte and\" href=\"http:\/\/www.freefixer.com\/b\/safe-down-virustotal-report\/\">Safe Down<\/a>.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/zpkaid.com-java-warning.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-2791\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/zpkaid.com-java-warning.png\" alt=\"zpkaid.com java warning\" width=\"227\" height=\"109\" \/><\/a><\/p>\n<p><strong>Update 2014-11-13<\/strong>: Today the fake update site is hosted\u00a0<strong>zrmica.com<\/strong>.<\/p>\n<p><strong>Update 2014-11-14<\/strong>: Today the fake site is hosted at\u00a0<strong>zszpkt.com<\/strong> and\u00a0<strong>ztcdnr.com<\/strong>. The downloads are\u00a0signed by &#8220;<a title=\"Safe Down \u2013 22% Detection Rate \u2013 Detected as IBryte and\" href=\"http:\/\/www.freefixer.com\/b\/safe-down-virustotal-report\/\">Safe Down<\/a>&#8221; and <a title=\"Fileangels \u2013 Detected as IBryte and OptimunInstaller\" href=\"http:\/\/www.freefixer.com\/b\/fileangels-publisher\/\">Fileangels<\/a>.<\/p>\n<p><strong>Update 2014-11-16<\/strong>: Now the fake site is hosted at\u00a0<strong>zwkuvp.com<\/strong>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Are you getting messages or pop-ups while browsing the web saying: &#8220;The page at http:\/\/s.mjytsw com says: WARNING!!! Your Java Version is Outdated, Have Security Risks, Please Update Now!&#8221; When I got this message I was redirected to a &#8220;Java Update&#8221;. The update was digitally signed by a company called Fileangels, so it&#8217;s clearly not &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/warning-java-outdated-security-risks-update\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">&#8220;WARNING!!! Your Java Version is Outdated, Have Security Risks, Please Update Now!&#8221;<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[3,178,185],"tags":[152],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/2367"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=2367"}],"version-history":[{"count":17,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/2367\/revisions"}],"predecessor-version":[{"id":2963,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/2367\/revisions\/2963"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=2367"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=2367"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=2367"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}