WTF is Java doing?

[hellrazor]

Here's one:

And here's another:

Anybody have any clue?

 

[hat]

Looks like it's eating resources to me. Try running virus scans and such.

 

[hellrazor]

Looks like it's eating resources to me. Try running virus scans and such.

Nothing from MBAM, combofix comes up clean.

 

[Batou1986]

What java apps do u have installed ?

 

[erixx]

there are java updates these days.
apart from that java crossplatform apps suck mostly...

BTW, I have been using Java apps all day, and I just finished working, closed those apps, and checked the java footprint on my memory,... AND THERE IS NONE! (Zero for all users, running W7) Not so bad!

 

[Kreij]

Java.exe should not be running in your processes unless it is called by something.
Depending on what you are doing can determine the resources the executable is consuming.
I have no java.exe process on mine at the moment.

 

[PVTCaboose1337]

When Java runs for me, it is not even called Java.exe. My guess? Virus. Hypothetical: If I had/made viruses, I would name the process a system process that no one would second guess, ie, adobe.exe. Just a tip.

 

[hellrazor]

When Java runs for me, it is not even called Java.exe. My guess? Virus. Hypothetical: If I had/made viruses, I would name the process a system process that no one would second guess, ie, adobe.exe. Just a tip.

I'll go see where it says it is.

 

[PVTCaboose1337]

Here is how real java looks:

 

[hellrazor]

OK, there's one in C:\Windows\System32 and one in C:\Program Files\Java\jre6\bin, both are exactly the same.

 

[PVTCaboose1337]

OK, there's on in C:\Windows\System32 and one in C:\Program Files\Java\jre6\bin, both are exactly the same.

I don't think these are viruses at this point, but use VirusTotal just to make sure.

http://www.virustotal.com/

 

[hellrazor]

Says they're clean.

 

[FordGT90Concept]

OK, there's one in C:\Windows\System32 and one in C:\Program Files\Java\jre6\bin, both are exactly the same.

The latter is for sure legit. The former is questionable. Java shouldn't be running from System32 as far as I know.

 

[hellrazor]

Well they're both the same size, if you'd like to suggest a nice checksum utility I could check that too.

 

[Solaris17]

The latter is for sure legit. The former is questionable. Java shouldn't be running from System32 as far as I know.

they can be depending on what you have installed. also it can be java.exe their are several executables javaw is just one of them. if you have the dev kit here is some of what you will find.

It could be a browser/flash game a game that needs it (such as the game chrome which was heavy on java) etc.

Well they're both the same size, if you'd like to suggest a nice checksum utility I could check that too.

I use this to hash calc my DVD's before I release the ISO's to the public. It does everything

http://downloads.solarisutilitydvd.com/Programs/Utilities/hashcalc.exe

 

[FordGT90Concept]

Was that picture taken in the Java directory or System32? That's what my Java directory looks like but I have absolutely no java.exe files in my System directories.

Edit: Nevermind, I do have Java.exe but it is in SysWOW64 instead of System32. They are byte-for-byte identical. Stupid Sun putting non-system files where they don't belong.

 

[Solaris17]

Was that picture taken in the Java directory or System32? That's what my Java directory looks like but I have absolutely no java.exe files in my System directories.

that was my JDK folder but I already answered your question. It depends on application. Here is my system 32

like most files certain apps that need java pull the rest of their .dll's from the system32 dir when they are too lazy to include them in the path. so in this instance w/e needed it has copied it to my system32 with the rest of the files needed for it to run correctly instead of checking the system to try and find the path of java itself. come now ford they must have explained lazy coders in programming class.

EDIT:: Also mine hash exactly the same. and java may have been busy because I caught a java platform update on an XP pro machine today.

 

[<<Onafets>>]

I have noticed that when I play minecraft and close it the java process still stays open for some reason. Were you playing minecraft?

 

[Solaris17]

does minecraft require deamon tools?

 

[PVTCaboose1337]

does minecraft require deamon tools?

No, Minecraft is just an EXE (that is a shell for Java stuff).

 

[Solaris17]

No, Minecraft is just an EXE (that is a shell for Java stuff).

thats the joke dude look at his process list and stop reading books GOD PVT how many times have I TOLD YOU

im simply not impressed after you read the list go over what i taught you about being sociable and street smart. then you will PM me why you were wrong.

 

[hellrazor]

No, I wasn't playing any games. The first one I wasn't doing anything, and the second was me in paint trying to get the first pic nice.

Anywho, here's a new one:

I really don't see why it would be taking 120MB of memory, just exactly what could it be doing?

EDIT: Same checksums.