Java: CLASS file processing and antivirus software

[new_profile]

Could you, please, post the infected .class or the link to it. Normally, the browser (in fact the security manager) do not allow any access to the local files and resources of an applet as java classes are loaded and executed in a separated context. At least, that what is claimed in the java world. This could be a bug of the JRE browser plugin though.

Thank you for the info.

[Mkz]

Independently of any security flaws that the security manager might have, this still doesn't explain why a process (IE) accesses a .jar or .zip, and the AV doesn't perform the scan of the archive and denies access.