Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: False Positives and Inaccuracies

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
groucho7 False Positives and Inaccuracies
Member 4th Dec, 2013 21:58
Ranking: 0
Posts: 7
User Since: 19th Aug, 2012
System Score: N/A
Location: IL
During the past year I have installed PSI several times and uninstalled it just as many times. Each time there were some programs wrongly detected by PSI as installed. Once it detected an "outdated" version of IrfanView when none was installed. Another time it detected some MS Office add-in as out-of-date when it had never been installed as a separate program. Now it detects Acronis True Image 2013 when version 2014 is installed. I wish Secunia were more careful and more accurate in creating its PSI database. Thanks.

NancyJ

RE: False Positives and Inaccuracies
[+]
This reply has been deleted
Maurice Joyce RE: False Positives and Inaccuracies
Handling Contributor 4th Dec, 2013 22:16
Score: 11720
Posts: 8,956
User Since: 4th Jan 2009
System Score: N/A
Location: UK
In this instance what file is PSI showing that requires updating or deletion?

FINDING A FILE PATH USING PSI

VERSION 2


From the DASHBOARD page click on SCAN RESULTS.

1. This will list all your programmes with a + to the left of each programme.
2. Click the + sign next to the item that U want help with.
3. This will reveal the path under DETECTED INSTANCES.
4. Below DETECTED INSTANCES you will see this You can double click this row for additional information & options>double click it>a box will appear>look to the RIGHT & U will see TROUBLESHOOT REPORT in BLUE writing under the heading TOOLBOX> click TroubleShoot Report & it will reveal some information in a box>highlight the information revealed from ---START--- to ---END--- & copy it (CTRL+C) then post it to the Forum (CTRL+V)

VERSION 3
This version does not have such an easy method to publish the path.

Open PSI>once open select Show Programs.
U will now see a page full of programme icons or a list.
Right click on the programme in error>select Show Details - that will open a box showing the path & version number of the offending file.
U now have 2 options:
1. Write down the exact file path & install version - return to the Forum & type that information.
2. Take a screen shot & publish that.

Last Reviewed 21:13 04/12/2013












--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
mogs RE: False Positives and Inaccuracies
Expert Contributor 4th Dec, 2013 22:19
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
Last edited on 4th Dec, 2013 22:53
@groucho7

It is often the case that tho' programs get updated....they leave the older file/version behind.

Note from FAQ :-
http://secunia.com/vulnerability_scanning/personal...
I have updated one of my programs, but an older version is still detected by the Secunia PSI. What can I do?

Some programs leave behind the older version when updating to a new one. Some vendors do this deliberatively by policy, and some vendors by mistake. An example of a vendor deliberatively leaving behind the old version is Google, who do not remove old versions when installing updates for Google Chrome. This is an intentional policy on Google's behalf, and is done to prevent developers using Chrome from losing any of their work.

How you wish to deal with such older versions is entirely up to you. For assistance, please contact the vendor. You can also post to our community forum:
http://secunia.com/community/forum/

So to re-cap.....older version/files get left behind.....when you scan with psi it still detects them....sometimes it will try to update them. It is telling you that you've got old junk/zombie files on your computer....very often...very accurately.
As the incidents arise you can always contact the forum if you're unsure....rather than let your grouches collect.

Hope it helps....regards.....mogs.....

--
Was this reply relevant?
+0
-0
groucho7 RE: False Positives and Inaccuracies
Member 6th Dec, 2013 15:14
Score: 0
Posts: 7
User Since: 19th Aug 2012
System Score: N/A
Location: IL
Thank you one and all for your excellent and expert explanations but why should PSI detect my Acronis True Image 2014 as Acronis True Image 2013?
Was this reply relevant?
+0
-0
Maurice Joyce RE: False Positives and Inaccuracies
Handling Contributor 6th Dec, 2013 16:53
Score: 11720
Posts: 8,956
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Check my post - what path does PSI give you to version 2013?

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
groucho7 RE: False Positives and Inaccuracies
Member 6th Dec, 2013 17:31
Score: 0
Posts: 7
User Since: 19th Aug 2012
System Score: N/A
Location: IL
Last edited on 6th Dec, 2013 17:33
The program's path is C:\ProgramFiles(x86)\Acronis\TrueImageHome\

The program file name is TrueImage.exe

The program file's Properties>>Details show Version 17.0.0.6614 and PSI detects this program as Acronis True Image 2013 version 17.0.0.6614

However, the program window's title bar displays Acronis True Image 2014 and its Help>>About True Image shows Acronis True Image 2014[/b Build: 6614 Sync agent version: [b]17,0,0,1722

If I understand this correctly, PSI should be displaying the same version information as the program itself is displaying.

Thanks.
Was this reply relevant?
+0
-0
Maurice Joyce RE: False Positives and Inaccuracies
Handling Contributor 6th Dec, 2013 20:56
Score: 11720
Posts: 8,956
User Since: 4th Jan 2009
System Score: N/A
Location: UK
You have not given me the full path that PSI is showing you. If you follow my script on finding the path you will see detail like my example below - I need the full Acronis 2013 path as highlighted in green on my example.


https://1ncuig.bn1303.livefilestore.com/y2pUrkOPAY...



--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
groucho7 RE: False Positives and Inaccuracies
Member 6th Dec, 2013 21:13
Score: 0
Posts: 7
User Since: 19th Aug 2012
System Score: N/A
Location: IL
Last edited on 6th Dec, 2013 21:17
As stated in my previous post, the File location is C:\ProgramFiles(x86)\Acronis\TrueImageHome\TrueIma ge.exe and the Installed version is 17.0.0.6614.

If you prefer, the full path is C:\ProgramFiles(x86)\Acronis\TrueImageHome\TrueIma ge.exe 17.0.0.6614.

BTW, for some reason the file name in the displayed post includes a space, which is not there when I edit it, and there is no way of removing it. This seems to be a bug in your website.

Thanks.
Was this reply relevant?
+0
-0
Maurice Joyce RE: False Positives and Inaccuracies
Handling Contributor 6th Dec, 2013 22:12
Score: 11720
Posts: 8,956
User Since: 4th Jan 2009
System Score: N/A
Location: UK
The reason PSI is not showing version 2014 is because no one using that programme has registered it to be on the Secunia database as can be seen here:

https://1ncuig.bn1304.livefilestore.com/y2pLfOIQaR...

You should suggest the 2014 version to Secunia if you want it to show correctly.

SUGGESTING A NEW PROGRAMME TO SECUNIA

PSI Version 3

1. Open PSI>show programmes - U should see all your programmes listed by an icon or list presentation.
2. Click Add Program (top right of page)
3. Fill out the details requested & click Send Data.

PSI Version 2

1. From the DASHBOARD page click on RESULTS.
2. On the RESULTS page look above the tab INSTALL SOLUTION & U will see a green icon & ARE YOU MISSING A PROGRAM?
3. Click it. Fill out the details requested.
4. Click SUGGEST SOFTWARE.

PSI Version 1

1. Open the PATCHED or SECURE BROWSING tab.
2. Scroll to the bottom where U will see a link in blue ink "Program Missing? Suggest It Here!"
3. Click the link & then fill out the details in the boxes that appear(the important bit is the FILE SELECTION).
4. Click Suggest Program.

If requested,Secunia respond by email that the programme has been added to their database. A full PSI scan should reveal it.

Last Reviewed 21:08 06/12/2013

Secunia run this website - if you think there is a bug you should report it to them at: support@secunia.com



--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability