Java: CLASS file processing and antivirus software

[nuemga2000]

Classes are loader through the class loader(s), that are part of the
Java runtime environment.There are different class loaders available,
and of course you can write your own. Normally, the class loader goes
through your classpath and examines the .jar files. If a matching .class
is found, then it's loaded ...

Kerstin

Hello,

Markus, that is strange. What browser do you use ?

I think that is a browser flow, especialy if you use that crap of MS IE.

As described here:

h t t p://www javaworld.com/javaworld/jw-09-1997/jw-09-hood.html

untrusted class will not be loaded.

regards,
asmith

[new_profile]

Could you, please, post the infected .class or the link to it. Normally, the browser (in fact the security manager) do not allow any access to the local files and resources of an applet as java classes are loaded and executed in a separated context. At least, that what is claimed in the java world. This could be a bug of the JRE browser plugin though.

Thank you for the info.

[Mkz]

Independently of any security flaws that the security manager might have, this still doesn't explain why a process (IE) accesses a .jar or .zip, and the AV doesn't perform the scan of the archive and denies access.