If you've got an old Java installer sitting in your downloads folder, delete it. Oracle announced old installers are vulnerable to binary planting.