navigation bar left navigation bar right

Secunia CSI7
navigation left tab Advisories navigation right tab
navigation left tab Research navigation right tab
navigation left tab Forums navigation right tab
navigation left tab Create Profile navigation right tab
navigation left tab Our Commitment navigation right tab
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: What is it ?!

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
WEB.DE
And, this specific program:
WEB.DE SmartSurfer

This thread has been marked as resolved.
mogs What is it ?!
Expert Contributor 16th Jan, 2012 22:33
Ranking: 2265
Posts: 6,268
User Since: 22nd Apr, 2009
System Score: 100%
Location: UK

Program Name:
WEB.DE SmartSurfer

Security State:
Patched

Download Link:


Instances Found:
C:\Windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a 1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\mfc80 .dll, version: 8.0.50727.6195
C:\Windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a 1e18e3b_8.0.50727.42_none_d6c3e7af9bae13a2\mfc80.d ll, version: 8.0.50727.42
C:\Windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a 1e18e3b_8.0.50727.4053_none_cbf21254470d8752\mfc80 .dll, version: 8.0.50727.4053
C:\Program Files\Canon\Easy-PhotoPrint EX\mfc80.dll, version: 8.0.50727.4053
C:\Program Files\TOSHIBA\ConfigFree\Microsoft.VC80.MFC\mfc80. dll, version: 8.0.50727.762


This evening I ran a scan and PSI detected the above program.....try as I may, I can't get the full TS Report to copy and paste. There were 8 files altogether....all shown as Patched....apart from the first 8.0.50727.6195 .....all were shown to be Zombie installations.
I've never heard of WEB.DE SmartSurfer before ! It seems to be some kind of low cost router software....having found the site and translated the German.
In the Secunia Advisories it shows no vulnerabilities but no version either.
The program doesn't show in Programs and Features nor Revouninstaller.
I'm guessing, but I think it may have a connection with Canon's aftersales auto online survey/usage.....can anybody enlighten and advise please ?


--

Post "RE: What is it ?!" has been selected as an answer.
Maurice Joyce RE: What is it ?!
Handling Contributor 17th Jan, 2012 00:05
Score: 11865
Posts: 9,101
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Looks like U are in a mad panic in the belief U have "caught something".

This is the details on Web.de who are a Microsoft Partner.
http://client.updatestar.com/en/about/

1. I think Secunia have been tinkering with their search engine & have either decided to include those files for vulnerability checking or have made an error including them.

2. The TroubleShoot Report on that file works perfectly having just tested mine.
What programme are U looking for? U have published all the details.

3. All the file versions numbers are showing from what U have published on your thread so I do not understand what U mean on that score either.

3. Most are located in the Windows SXS (side by side) folder to prevent .dll hell.
U should also note they are all Microsoft Foundation Class Libraries.

4. Just open Windows Explorer from the paths PSI has given U & it reveals the files & detail as normal including the modification date which tells U how long U have had each file.

I have got some & have had for a long time - they are patched & I have no intention of doing anything.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+3
-0
mogs RE: What is it ?!
Expert Contributor 17th Jan, 2012 09:16
Score: 2265
Posts: 6,268
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
Last edited on 17th Jan, 2012 09:17
Thanks Maurice.....no mad panic.....just a little disconcerting to have it suddenly appear."Why hadn't it showed up before?"....thanks for the explanation. As it was patched, I wasn't overly worried. It was the appearance of 7 Zombie files in a "new" detection that threw me I think.
You've given me what I was looking for....just some background info as to it's purpose.

I'd copied the T/S Report from Start to End a number of times....each time I tried pasting, the resulting text was incomplete.....Didn't you say some time ago that there was a bug with it in the 2.0.0.4003 version ?


--
Was this reply relevant?
+0
-0
Maurice Joyce RE: What is it ?!
Handling Contributor 17th Jan, 2012 09:32
Score: 11865
Posts: 9,101
User Since: 4th Jan 2009
System Score: N/A
Location: UK
The bug is it pastes Windows 7 Windows 7 & & there is no SP following like this

C:\Program Files (x86)\NVIDIA Corporation\nTune\mfc80.dll, version: 8.0.50727.762

Last System Scan (localtime):
16. Jan 2012, 09:17

Operating System:
Microsoft Windows 7, Microsoft Windows 7

---END---

Mine are not zombie files - where does it indicate to U they are zombie?

If they are zombie why has your cleaner not removed them?

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
mogs RE: What is it ?!
Expert Contributor 17th Jan, 2012 09:55
Score: 2265
Posts: 6,268
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
I've just run CCleaner again....and scanned. The 8 files still show up.....7 of them Zombies.....+..twice on the Detected Instances pane......and they are indicated as being such in Classification. The one file is classified as Actual Installation.

--
Was this reply relevant?
+0
-0
Maurice Joyce RE: What is it ?!
Handling Contributor 17th Jan, 2012 09:58
Score: 11865
Posts: 9,101
User Since: 4th Jan 2009
System Score: N/A
Location: UK
So, if U follow the file associated with Canon what else is in that folder?

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
mogs RE: What is it ?!
Expert Contributor 17th Jan, 2012 10:13
Score: 2265
Posts: 6,268
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
A whole host of files.....the majority beginning CNEZ

--
Was this reply relevant?
+0
-0
Maurice Joyce RE: What is it ?!
Handling Contributor 17th Jan, 2012 10:26
Score: 11865
Posts: 9,101
User Since: 4th Jan 2009
System Score: N/A
Location: UK
I note Canon is is in C:\Program Files ......

Have U still got it installed for use? Does it show in Control Panel>add/remove?

If not how did U attempt to remove it?

I assume the files CN.... indicate they are Canon files - without the full designation hard to tell.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
mogs RE: What is it ?!
Expert Contributor 17th Jan, 2012 10:51
Score: 2265
Posts: 6,268
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
Yes, it is installed for use....from Xmas.....I havn't "mastered" using it yet tho' !!
Yes, it is shown in Control Panel....Programs and Features
Easy Print is also shown as a separate entry on the psi Scan Results along with other entries for Canon installations.

--
Was this reply relevant?
+0
-0
Maurice Joyce RE: What is it ?!
Handling Contributor 17th Jan, 2012 11:00
Score: 11865
Posts: 9,101
User Since: 4th Jan 2009
System Score: N/A
Location: UK
So, U should be able to see that dll file in Windows Explorer from two areas.

C:\Program Files\Canon & web.de as U have just done.

Looks like a bonus to me althouugh I remain unsure why Secunia have suddenly decided to duplicate.

Your zombie files remain a mystery. Sadly cannot help further with that. Troubleshooting where Registry Cleaners are involved is like looking for "a needle in a haystack" but earm me a small fortune!!!



--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
mogs RE: What is it ?!
Expert Contributor 17th Jan, 2012 11:28
Score: 2265
Posts: 6,268
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
I think that's the point Maurice......there is no "trouble" as such.....it seems that if Secunia had not decided to detect WEB.DE SmartSurfer, I'd have not known it was on my computer. As a separate entity, WEB.DE doesn't show up in C/Panel or anywhere else other than on psi....tho' all the Canon progs do.
I'll just have to keep an eye on the SmartSurfer and the Classification of the files within it.....it wouldn't be the first time if it were to alter. I never seem to get to a state of blissful awareness or comfort in numbness tho' !! I'm not sure either that Registry Scanners are a general panacea...as such I try not to clash with your expert advice and opinion....it's just that it does seem to work for me......down to a couple of registry errors a week on average.
Thankyou again for all your help/advice and consideration.

--
Was this reply relevant?
+0
-0
Maurice Joyce RE: What is it ?!
Handling Contributor 17th Jan, 2012 13:32
Score: 11865
Posts: 9,101
User Since: 4th Jan 2009
System Score: N/A
Location: UK
If U run a new scan U will find Web.de has gone.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


Secunia is a member of FIRST Secunia is a member of EDUcause Secunia is a member of The Open Group Secunia is a member of FS-ISAC
 
Secunia © 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer
follow Secunia on Facebook follow Secunia on Twitter follow Secunia on LinkedIn follow Secunia on YouTube follow Secunia Xing follow Secunias RSS feed follow Secunia on Google+