[Blinding]

Been a while since Ive been around. Site was kinda dead back when I joined but it seems to be going good. Maybe I'll stick around a little longer. Anywho, my father logged onto his computer today to find a Notepad doccument titled -- hs_err_pid3640

The doccument reads....

An unexpected exception has been detected in native code outside the VM.
Unexpected Signal : EXCEPTION_ACCESS_VIOLATION (0xc0000005) occurred at PC=0xB4423CF
Function=Java_sun_awt_windows_WColor_getDefaultColor+0x2E0D
Library=C:\Program Files\Java\j2re1.4.2\bin\awt.dll

Current Java thread:
at sun.awt.windows.WToolkit.eventLoop(Native Method)
at sun.awt.windows.WToolkit.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)

Dynamic libraries:
0x00400000 - 0x0049B000 C:\Program Files\Internet Explorer\iexplore.exe
0x7C900000 - 0x7C9B0000 C:\WINDOWS\system32\ntdll.dll
0x7C800000 - 0x7C8F5000 C:\WINDOWS\system32\kernel32.dll
0x77DD0000 - 0x77E6B000 C:\WINDOWS\system32\ADVAPI32.dll
0x77E70000 - 0x77F01000 C:\WINDOWS\system32\RPCRT4.dll
0x77F10000 - 0x77F57000 C:\WINDOWS\system32\GDI32.dll
0x7E410000 - 0x7E4A0000 C:\WINDOWS\system32\USER32.dll
0x77C10000 - 0x77C68000 C:\WINDOWS\system32\msvcrt.dll
0x77F60000 - 0x77FD6000 C:\WINDOWS\system32\SHLWAPI.dll
0x7C9C0000 - 0x7D1D5000 C:\WINDOWS\system32\SHELL32.dll
0x774E0000 - 0x7761D000 C:\WINDOWS\system32\ole32.dll
0x42CF0000 - 0x42E14000 C:\WINDOWS\system32\urlmon.dll
0x77120000 - 0x771AB000 C:\WINDOWS\system32\OLEAUT32.dll
0x42990000 - 0x429D5000 C:\WINDOWS\system32\iertutil.dll
0x77C00000 - 0x77C08000 C:\WINDOWS\system32\VERSION.dll
0x76390000 - 0x763AD000 C:\WINDOWS\system32\IMM32.DLL
0x773D0000 - 0x774D3000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
0x5D090000 - 0x5D12A000 C:\WINDOWS\system32\comctl32.dll
0x00A20000 - 0x00A37000 C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
0x42EF0000 - 0x434BB000 C:\WINDOWS\system32\IEFRAME.dll
0x76BF0000 - 0x76BFB000 C:\WINDOWS\system32\PSAPI.DLL
0x5AD70000 - 0x5ADA8000 C:\WINDOWS\system32\UxTheme.dll
0x74720000 - 0x7476B000 C:\WINDOWS\system32\MSCTF.dll
0x18800000 - 0x18836000 C:\Program Files\UltraMon\RTSUltraMonHook.dll
0x20000000 - 0x202C5000 C:\WINDOWS\system32\xpsp2res.dll
0x755C0000 - 0x755EE000 C:\WINDOWS\system32\msctfime.ime
0x5DFF0000 - 0x5E01F000 C:\WINDOWS\system32\IEUI.dll
0x76380000 - 0x76385000 C:\WINDOWS\system32\MSIMG32.dll
0x4EC50000 - 0x4EDF3000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2 180_x-ww_522f9f82\gdiplus.dll
0x47060000 - 0x47081000 C:\WINDOWS\system32\xmllite.dll
0x77B40000 - 0x77B62000 C:\WINDOWS\system32\apphelp.dll
0x76FD0000 - 0x7704F000 C:\WINDOWS\system32\CLBCATQ.DLL
0x77050000 - 0x77115000 C:\WINDOWS\system32\COMRes.dll
0x746F0000 - 0x7471A000 C:\WINDOWS\system32\msimtf.dll
0x77FE0000 - 0x77FF1000 C:\WINDOWS\system32\Secur32.dll
0x18900000 - 0x18903000 C:\Program Files\UltraMon\Resources\en\RTSUltraMonHookRes.dll
0x77A20000 - 0x77A74000 C:\WINDOWS\System32\cscui.dll
0x76600000 - 0x7661D000 C:\WINDOWS\System32\CSCDLL.dll
0x77920000 - 0x77A13000 C:\WINDOWS\system32\SETUPAPI.dll
0x61930000 - 0x6197A000 C:\Program Files\Internet Explorer\ieproxy.dll
0x75E90000 - 0x75F40000 C:\WINDOWS\system32\SXS.DLL
0x42C10000 - 0x42CDF000 C:\WINDOWS\system32\WININET.dll
0x018B0000 - 0x018B9000 C:\WINDOWS\system32\Normaliz.dll
0x75CF0000 - 0x75D81000 C:\WINDOWS\system32\MLANG.dll
0x71AB0000 - 0x71AC7000 C:\WINDOWS\system32\ws2_32.dll
0x71AA0000 - 0x71AA8000 C:\WINDOWS\system32\WS2HELP.dll
0x10000000 - 0x1037F000 c:\program files\google\googletoolbar1.dll
0x7D1E0000 - 0x7D49E000 C:\WINDOWS\system32\msi.dll
0x77A80000 - 0x77B14000 C:\WINDOWS\system32\CRYPT32.dll
0x77B20000 - 0x77B32000 C:\WINDOWS\system32\MSASN1.dll
0x76C90000 - 0x76CB8000 C:\WINDOWS\system32\imagehlp.dll
0x76B40000 - 0x76B6D000 C:\WINDOWS\system32\WINMM.dll
0x76C30000 - 0x76C5E000 C:\WINDOWS\system32\WINTRUST.dll
0x71AD0000 - 0x71AD9000 C:\WINDOWS\system32\WSOCK32.dll
0x74980000 - 0x74A93000 C:\WINDOWS\system32\msxml3.dll
0x59A60000 - 0x59B01000 C:\WINDOWS\system32\DBGHELP.DLL
0x5B860000 - 0x5B8B4000 C:\WINDOWS\system32\netapi32.dll
0x76990000 - 0x769B5000 C:\WINDOWS\system32\ntshrui.dll
0x76B20000 - 0x76B31000 C:\WINDOWS\system32\ATL.DLL
0x769C0000 - 0x76A73000 C:\WINDOWS\system32\USERENV.dll
0x71B20000 - 0x71B32000 C:\WINDOWS\system32\MPR.dll
0x75F60000 - 0x75F67000 C:\WINDOWS\System32\drprov.dll
0x71C10000 - 0x71C1E000 C:\WINDOWS\System32\ntlanman.dll
0x71CD0000 - 0x71CE7000 C:\WINDOWS\System32\NETUI0.dll
0x71C90000 - 0x71CD0000 C:\WINDOWS\System32\NETUI1.dll
0x71C80000 - 0x71C87000 C:\WINDOWS\System32\NETRAP.dll
0x71BF0000 - 0x71C03000 C:\WINDOWS\System32\SAMLIB.dll
0x75F70000 - 0x75F79000 C:\WINDOWS\System32\davclnt.dll
0x76EE0000 - 0x76F1C000 C:\WINDOWS\system32\RASAPI32.dll
0x76E90000 - 0x76EA2000 C:\WINDOWS\system32\rasman.dll
0x76EB0000 - 0x76EDF000 C:\WINDOWS\system32\TAPI32.dll
0x76E80000 - 0x76E8E000 C:\WINDOWS\system32\rtutils.dll
0x75970000 - 0x75A67000 C:\WINDOWS\system32\MSGINA.dll
0x76360000 - 0x76370000 C:\WINDOWS\system32\WINSTA.dll
0x74320000 - 0x7435D000 C:\WINDOWS\system32\ODBC32.dll
0x763B0000 - 0x763F9000 C:\WINDOWS\system32\comdlg32.dll
0x02800000 - 0x02817000 C:\WINDOWS\system32\odbcint.dll
0x77C70000 - 0x77C93000 C:\WINDOWS\system32\msv1_0.dll
0x76D60000 - 0x76D79000 C:\WINDOWS\system32\iphlpapi.dll
0x71A50000 - 0x71A8F000 C:\WINDOWS\system32\mswsock.dll
0x662B0000 - 0x66308000 C:\WINDOWS\system32\hnetcfg.dll
0x71A90000 - 0x71A98000 C:\WINDOWS\System32\wshtcpip.dll
0x722B0000 - 0x722B5000 C:\WINDOWS\system32\sensapi.dll
0x76F20000 - 0x76F47000 C:\WINDOWS\system32\DNSAPI.dll
0x76FB0000 - 0x76FB8000 C:\WINDOWS\System32\winrnr.dll
0x76F60000 - 0x76F8C000 C:\WINDOWS\system32\WLDAP32.dll
0x76FC0000 - 0x76FC6000 C:\WINDOWS\system32\rasadhlp.dll
0x71D40000 - 0x71D5C000 C:\WINDOWS\system32\actxprxy.dll
0x435D0000 - 0x43941000 C:\WINDOWS\system32\mshtml.dll
0x746C0000 - 0x746E9000 C:\WINDOWS\system32\msls31.dll
0x43560000 - 0x435C0000 C:\WINDOWS\system32\ieapfltr.dll
0x77690000 - 0x776B1000 C:\WINDOWS\system32\NTMARTA.DLL
0x63380000 - 0x633F8000 C:\WINDOWS\system32\jscript.dll
0x58760000 - 0x58792000 C:\WINDOWS\system32\iepeers.dll
0x73000000 - 0x73026000 C:\WINDOWS\system32\WINSPOOL.DRV
0x73300000 - 0x73365000 C:\WINDOWS\system32\vbscript.dll
0x42B90000 - 0x42C07000 C:\WINDOWS\system32\mshtmled.dll
0x35C50000 - 0x35C89000 C:\WINDOWS\system32\Dxtrans.dll
0x6D430000 - 0x6D43A000 C:\WINDOWS\system32\ddrawex.dll
0x73760000 - 0x737A9000 C:\WINDOWS\system32\DDRAW.dll
0x73BC0000 - 0x73BC6000 C:\WINDOWS\system32\DCIMAN32.dll
0x72D20000 - 0x72D29000 C:\WINDOWS\system32\wdmaud.drv
0x72D10000 - 0x72D18000 C:\WINDOWS\system32\msacm32.drv
0x77BE0000 - 0x77BF5000 C:\WINDOWS\system32\MSACM32.dll
0x77BD0000 - 0x77BD7000 C:\WINDOWS\system32\midimap.dll
0x1B000000 - 0x1B00C000 C:\WINDOWS\system32\ImgUtil.dll
0x1B060000 - 0x1B06E000 C:\WINDOWS\system32\pngfilt.dll
0x0FFD0000 - 0x0FFF8000 C:\WINDOWS\system32\rsaenh.dll
0x767F0000 - 0x76817000 C:\WINDOWS\system32\schannel.dll
0x68100000 - 0x68124000 C:\WINDOWS\system32\dssenh.dll
0x30000000 - 0x302EF000 C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx
0x73940000 - 0x73A10000 C:\WINDOWS\system32\D3DIM700.DLL
0x74D90000 - 0x74DFB000 C:\WINDOWS\system32\USP10.dll
0x35CB0000 - 0x35D07000 C:\WINDOWS\system32\Dxtmsft.dll
0x6D440000 - 0x6D450000 C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
0x5EDD0000 - 0x5EDE7000 C:\WINDOWS\system32\OLEPRO32.DLL
0x6D310000 - 0x6D327000 C:\Program Files\Java\j2re1.4.2\bin\jpiexp32.dll
0x6D380000 - 0x6D397000 C:\Program Files\Java\j2re1.4.2\bin\jpishare.dll
0x08670000 - 0x087A6000 C:\PROGRA~1\Java\J2RE14~1.2\bin\client\jvm.dll
0x00AF0000 - 0x00AF7000 C:\PROGRA~1\Java\J2RE14~1.2\bin\hpi.dll
0x031E0000 - 0x031EE000 C:\PROGRA~1\Java\J2RE14~1.2\bin\verify.dll
0x031F0000 - 0x03208000 C:\PROGRA~1\Java\J2RE14~1.2\bin\java.dll
0x03210000 - 0x0321D000 C:\PROGRA~1\Java\J2RE14~1.2\bin\zip.dll
0x0B3D0000 - 0x0B4DA000 C:\Program Files\Java\j2re1.4.2\bin\awt.dll
0x0B4E0000 - 0x0B530000 C:\Program Files\Java\j2re1.4.2\bin\fontmanager.dll
0x6D2F0000 - 0x6D304000 C:\Program Files\Java\j2re1.4.2\bin\jpicom32.dll
0x0CFA0000 - 0x0CFAF000 C:\Program Files\Java\j2re1.4.2\bin\net.dll
0x0CFB0000 - 0x0CFD2000 C:\Program Files\Java\j2re1.4.2\bin\dcpr.dll
0x0D6A0000 - 0x0DA9F000 C:\WINDOWS\resources\Themes\Luna\Luna.msstyles
0x0D070000 - 0x0D08E000 C:\Program Files\Java\j2re1.4.2\bin\jpeg.dll
0x429F0000 - 0x42A98000 C:\WINDOWS\system32\mstime.dll
0x75F80000 - 0x7607D000 C:\WINDOWS\system32\browseui.dll
0x73B30000 - 0x73B45000 C:\WINDOWS\system32\mscms.dll

Heap at VM Abort:
Heap
def new generation total 1792K, used 1195K [0x202d0000, 0x204c0000, 0x20a30000)
eden space 1600K, 74% used [0x202d0000, 0x203f9d08, 0x20460000)
from space 192K, 2% used [0x20460000, 0x204611f0, 0x20490000)
to space 192K, 0% used [0x20490000, 0x20490000, 0x204c0000)
tenured generation total 22856K, used 15531K [0x20a30000, 0x22082000, 0x262d0000)
the space 22856K, 67% used [0x20a30000, 0x2195ad28, 0x2195ae00, 0x22082000)
compacting perm gen total 10496K, used 10381K [0x262d0000, 0x26d10000, 0x2a2d0000)
the space 10496K, 98% used [0x262d0000, 0x26cf35e8, 0x26cf3600, 0x26d10000)

Local Time = Thu Sep 27 09:02:11 2007
Elapsed Time = 551
#
# The exception above was detected in native code outside the VM
#
# Java VM: Java HotSpot(TM) Client VM (1.4.2-b28 mixed mode)
#



From what I can see it looks like a loophole in Java security perhaps? But Id rather have a well educated guess. Thanks.

[guitar]

your java is out of date uninstall it and update it here
http://www.filehippo.com/download_java_runtime/

[Blinding]

No spyware?

[WhitPhil]

If the Java VM fails, your browser dies and a notepad file is created documenting the failure.

Your version is relatively old, and as a result of visiting a site, may have fallen over. Uninstall the current version and upgrade to the latest.

Spyware??
Download, install and run HiJackThis, and post back a LOG for review.