New DLL's have been loaded ?

Can anyone tell me if notification of new DLL's have been
loaded is a normal update or is this a security risk
usually happens when I visit some web sites firewall list
this new DLL's are listed major, security type executables
files. I normally refuse any changes since I'm not sure if
a legitime update of DLL's files.
Last set of new DLL's
Application has changed since last time you opened it file
name c:\programfiles \internet explorer\iexplore.exe

c:\windows\system\masawt.dlll
c:\windows\system\javart.dll
c:\windows\system\jit.dll
Thank you in advance for any help .
Jim

PA
Sat May 22 22:34:07 CDT 2004

Those are all created by a Trojan worm on your system! They are not valid
Windows files.

Protect Your PC
http://www.microsoft.com/security/protect/default.asp
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

Jim wrote:
> Can anyone tell me if notification of new DLL's have been
> loaded is a normal update or is this a security risk
> usually happens when I visit some web sites firewall list
> this new DLL's are listed major, security type executables
> files. I normally refuse any changes since I'm not sure if
> a legitime update of DLL's files.
> Last set of new DLL's
> Application has changed since last time you opened it file
> name c:\programfiles \internet explorer\iexplore.exe
>
> c:\windows\system\masawt.dlll
> c:\windows\system\javart.dll
> c:\windows\system\jit.dll
> Thank you in advance for any help .
> Jim

RC
Sun May 23 05:44:40 CDT 2004

Robear, I'm hoping that this applies only to 'new' dl'ds of these dll's.
Javart.dll and jit.dll are on my system and have been for years. I ran
mcafee for years and I'm running grisoft's avg now. Nothing comes up. Also
run adaware, ss&d, sb and cwshredder. System runs fine and appears to be
clean. tia, rc


"PA Bear" <PABear@mvps.org> wrote in message
news:uZhIRbHQEHA.2744@TK2MSFTNGP12.phx.gbl...
> Those are all created by a Trojan worm on your system! They are not valid
> Windows files.
>
> Protect Your PC
> http://www.microsoft.com/security/protect/default.asp
> --
> HTH - Please Reply to This Thread
>
> ~Robear Dyer (PA Bear)
> MS MVP-Windows (IE/OE), AH-VSOP
>
> AumHa Forums
> http://forum.aumha.org
>
> Jim wrote:
> > Can anyone tell me if notification of new DLL's have been
> > loaded is a normal update or is this a security risk
> > usually happens when I visit some web sites firewall list
> > this new DLL's are listed major, security type executables
> > files. I normally refuse any changes since I'm not sure if
> > a legitime update of DLL's files.
> > Last set of new DLL's
> > Application has changed since last time you opened it file
> > name c:\programfiles \internet explorer\iexplore.exe
> >
> > c:\windows\system\masawt.dlll
> > c:\windows\system\javart.dll
> > c:\windows\system\jit.dll
> > Thank you in advance for any help .
> > Jim
>

Andrew
Sun May 23 07:42:19 CDT 2004

"PA Bear" <PABear@mvps.org> said

> Those are all created by a Trojan worm on your system! They are not valid
> Windows files.
>

Absolute crap.
Msawt.dll, javart.dll and jit.dll are all part of the Java runtime for
Windows.

Msawt.dll is the abstract windows toolkit for Java
Javart.dll is the Java runtime itself
Jit.dll is the just-in-time compiler for Java.

They are all normal files to be appearing on your system and there is no need
to delete them. They may have been updated if you have recently applied any
IE or Windows service packs or HotFixes.

--
Andy.

Dave
Sun May 23 08:12:53 CDT 2004


"Andrew Mitchell" <amitchell@removecasey.vic.gov.au> wrote in message
news:Xns94F2E705B5B63casey01@207.46.248.16...
> "PA Bear" <PABear@mvps.org> said
>
> > Those are all created by a Trojan worm on your system! They are not
valid
> > Windows files.
> >
>
> Absolute crap.
> Msawt.dll, javart.dll and jit.dll are all part of the Java runtime for
> Windows.
>

you mean all this time microsoft was wrong? those aren't horrible worms
trying to get a foothold in microsoft's operating systems??

RC
Sun May 23 10:38:47 CDT 2004

Can't say who is right or who is wrong. All I know is that I've being
running proggies searching for these trojans and nothing comes up. I
researched the files on google groups and they seem to be legit java files.
For now I'll leave them since everything seems to be running okay. rc

"Dave" <noone@nowhere.com> wrote in message
news:uPcCseMQEHA.2216@TK2MSFTNGP12.phx.gbl...
>
> "Andrew Mitchell" <amitchell@removecasey.vic.gov.au> wrote in message
> news:Xns94F2E705B5B63casey01@207.46.248.16...
> > "PA Bear" <PABear@mvps.org> said
> >
> > > Those are all created by a Trojan worm on your system! They are not
> valid
> > > Windows files.
> > >
> >
> > Absolute crap.
> > Msawt.dll, javart.dll and jit.dll are all part of the Java runtime for
> > Windows.
> >
>
> you mean all this time microsoft was wrong? those aren't horrible worms
> trying to get a foothold in microsoft's operating systems??
>
>

Andrew
Mon May 24 05:03:07 CDT 2004

"RC" <anonymous@spoof.com> said

> Can't say who is right or who is wrong. All I know is that I've being
> running proggies searching for these trojans and nothing comes up. I
> researched the files on google groups and they seem to be legit java files.
> For now I'll leave them since everything seems to be running okay. rc
>

Definitely MS files, and form part of IE.
Check here for details
http://support.microsoft.com/?kbid=265094
Scroll down to JavaX86.cab and JavaBase.cab

Jim
Mon May 24 09:02:46 CDT 2004

Thaks for all the help
Jim
>-----Original Message-----
>Can anyone tell me if notification of new DLL's have been
>loaded is a normal update or is this a security risk
>usually happens when I visit some web sites firewall list
>this new DLL's are listed major, security type
executables
>files. I normally refuse any changes since I'm not sure
if
>a legitime update of DLL's files.
>Last set of new DLL's
>Application has changed since last time you opened it
file
>name c:\programfiles \internet explorer\iexplore.exe
>
>c:\windows\system\masawt.dlll
>c:\windows\system\javart.dll
>c:\windows\system\jit.dll
>Thank you in advance for any help .
>Jim
>.
>

PA
Mon May 24 20:54:06 CDT 2004

Yes, you're right, they're all valid Windows files. I *swear* I got no hits
whatsoever when I ran a Google search for them before I posted; Now I do.

Excuuuuuuuuuuuuuuuse me!
--
~PA Bear

RC wrote:
> Robear, I'm hoping that this applies only to 'new' dl'ds of these dll's.
> Javart.dll and jit.dll are on my system and have been for years. I ran
> mcafee for years and I'm running grisoft's avg now. Nothing comes up.
> Also run adaware, ss&d, sb and cwshredder. System runs fine and appears
> to be clean. tia, rc
>
>
> "PA Bear" <PABear@mvps.org> wrote in message
> news:uZhIRbHQEHA.2744@TK2MSFTNGP12.phx.gbl...
>> Those are all created by a Trojan worm on your system! They are not
>> valid Windows files.
>>
>> Protect Your PC
>> http://www.microsoft.com/security/protect/default.asp
>> --
>> HTH - Please Reply to This Thread
>>
>> ~Robear Dyer (PA Bear)
>> MS MVP-Windows (IE/OE), AH-VSOP
>>
>> AumHa Forums
>> http://forum.aumha.org
>>
>> Jim wrote:
>>> Can anyone tell me if notification of new DLL's have been
>>> loaded is a normal update or is this a security risk
>>> usually happens when I visit some web sites firewall list
>>> this new DLL's are listed major, security type executables
>>> files. I normally refuse any changes since I'm not sure if
>>> a legitime update of DLL's files.
>>> Last set of new DLL's
>>> Application has changed since last time you opened it file
>>> name c:\programfiles \internet explorer\iexplore.exe
>>>
>>> c:\windows\system\masawt.dlll
>>> c:\windows\system\javart.dll
>>> c:\windows\system\jit.dll
>>> Thank you in advance for any help .
>>> Jim