Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: How to ignore Windows XP Pro from EOL.

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
Compumind How to ignore Windows XP Pro from EOL.
Member 9th Apr, 2014 21:58
Ranking: 8
Posts: 54
User Since: 2nd Feb, 2010
System Score: N/A
Location: US
Hi.

Sounds a bit silly, but I cannot exclude (ignore) Windows XP Pro from PSI 2.x
Could you please fix this and/or walk me through the solution?

TIA,

Compumind :)

Maurice Joyce RE: How to ignore Windows XP Pro from EOL.
Handling Contributor 9th Apr, 2014 23:54
Score: 11710
Posts: 8,954
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 9th Apr, 2014 23:54
I have just tested this with Windows 7 & it ignores OK.

Open PSI>Scan results>expand any programme by clicking the "+" to the left of the programme entry.

This will reveal DETECTED INSTANCES and below it two Yellow Folders. Click the folder with the RED dot which will create an Ignore Rule for that item.

Interested to learn if it works with XP.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+5
-3
SteveSecunia14 RE: How to ignore Windows XP Pro from EOL.
Member 10th Apr, 2014 10:14
Score: 4
Posts: 30
User Since: 10th Oct 2012
System Score: 93%
Location: US
Last edited on 10th Apr, 2014 10:16
I cannot exclude (ignore) Windows XP Pro from PSI 2.x
There is no file path or folders given under detected instances.
Latest version just says product discontinued.
When I go to make an ignore rule there is no path given there as well.
Was this reply relevant?
+2
-1
steffens RE: How to ignore Windows XP Pro from EOL.
Member 10th Apr, 2014 11:34
Score: 47
Posts: 62
User Since: 25th Jul 2009
System Score: N/A
Location: US
Agreed. In PSI 2.0.0.3003 there is NO "detected instance" for XP Pro, so there is no red-dot folder icon to click on to generate an ignore rule.

Double-clicking the row brings up a "Quick Facts" window that seems to be a tad bogus. Clicking on the "Secunia Advisory Solution" link brings up a window full of what looks like HTML or JavaScript. And the vulnerability report referenced to get the threat rating, SA57642, was FIXED in this month's last-ever batch of patches, if I'm not mistaken.

Perhaps most interesting of all, I have an additional EOL detection for "MS Process Explorer 11.x". This suggests "MS Update" as a solution, but I'm clean there -- all patches to date have been installed. There IS a "detected instance" in this case, so I can click the red-dot folder icon to generate an ignore rule. (May have to do that eventually, as I did for the obsolete Blaster/Nachi removal tool. But not quite yet... I want to see whether PSI's rule set for this item changes over the next couple of weeks.) Right now for a "Latest Version " it's recommending 16.x as a solution, which likely won't do squat on XP, even if I could find and install it.

Double-clicking on this row brings up a "Quick Facts" window that also seems to be a tad bogus. The "Solution" link references MS Update, which ain't gonna help, and the "Advisory" link references vulnerability report "S0" !

So in a word, NO, you CANNOT easily set PSI 2 to ignore XP Pro EOL detection using the standard "click on the red-dot folder icon" technique.

Bottom Line: I end up with 2 EOL detections out of 61 for a score of 97%. So it goes...


Was this reply relevant?
+3
-2
Compumind RE: How to ignore Windows XP Pro from EOL.
Member 10th Apr, 2014 18:19
Score: 8
Posts: 54
User Since: 2nd Feb 2010
System Score: N/A
Location: US
Hi Maurice and others,

I kindly request a fix for this issue.
Perhaps Secunia can respond.

Thanks,

Compumind :)
Was this reply relevant?
+2
-2
taffy078 RE: How to ignore Windows XP Pro from EOL.
Contributor 11th Apr, 2014 07:31
Score: 408
Posts: 1,335
User Since: 26th Feb 2009
System Score: 100%
Location: UK
On the Main page is a 'Learn More' menu in which is a link to the PDF Guide. On page 4.2 of that Guide it says there is a 'Ignore Role' button but there's not, as you've all said.

Left-clicking the + in the Scan Results doesn't reveal the path.

Left-clicking "Windows XP" in the Scan Results brings up more info; you'll see the program again at the bottom but there's no path there, either. That's where you'd normally right-click to get the Ignore button

I suggest you email Support and then let us know.

--
taffy078, West Yorkshire, UK

Desktop: Compaq Presario (OEM) 32 bit / AMD Athlon / 2 GB RAM
XP Home - SP3/ IE8/ Norton IS - Secunia PSI v2.0.0.3003

Laptop: Win 7 / IE11 / PSI v2.0.0.3003
Was this reply relevant?
+1
-0
taffy078 RE: How to ignore Windows XP Pro from EOL.
Contributor 11th Apr, 2014 08:05
Score: 408
Posts: 1,335
User Since: 26th Feb 2009
System Score: 100%
Location: UK
@ Maurice. Yes, Maurice - the two folder icons appear in the Scan Results in XP too but not next to the Window XP Professional, presumably due to its path now being shown.

--
taffy078, West Yorkshire, UK

Desktop: Compaq Presario (OEM) 32 bit / AMD Athlon / 2 GB RAM
XP Home - SP3/ IE8/ Norton IS - Secunia PSI v2.0.0.3003

Laptop: Win 7 / IE11 / PSI v2.0.0.3003
Was this reply relevant?
+1
-0
taffy078 RE: How to ignore Windows XP Pro from EOL.
Contributor 11th Apr, 2014 10:50
Score: 408
Posts: 1,335
User Since: 26th Feb 2009
System Score: 100%
Location: UK
Hello Compumind. I hope you won't mind me hijacking this but as I needed to contact Support about two other issues, I mentioned this and referred them to this thread.of yours.

Here's their reply:

From Villiam Bartholdy, IT Support

Thanks for making us aware of the issue with ignoring XP, with the recent changes that seems like something several users might want to do. I have made out developers aware of it, and you will hopefully be able to do it soon.



--
taffy078, West Yorkshire, UK

Desktop: Compaq Presario (OEM) 32 bit / AMD Athlon / 2 GB RAM
XP Home - SP3/ IE8/ Norton IS - Secunia PSI v2.0.0.3003

Laptop: Win 7 / IE11 / PSI v2.0.0.3003
Was this reply relevant?
+3
-2
Compumind RE: How to ignore Windows XP Pro from EOL.
Member 11th Apr, 2014 18:45
Score: 8
Posts: 54
User Since: 2nd Feb 2010
System Score: N/A
Location: US
@taffy078,

No problem, mate! :)

I wish Secunia would respond here in this forum regarding my request.
The problem has still not been corrected as of this post date.

Compumind
Was this reply relevant?
+1
-0
jerrykde RE: How to ignore Windows XP Pro from EOL.
Member 14th Apr, 2014 14:04
Score: -1
Posts: 2
User Since: 23rd May 2008
System Score: N/A
Location: N/A
In scan results I get no 'detected instances' and no path to ignore the message.

And as suggested in another reply by Maurice Joyce who tried it with Win7 (?) it does not work for Win7 either: in this case there is 'detected instances' (Windows 7), but there are NO BUTTONS to push. So I doubt he actually tried it ..

I ask Secunia to fix this for XP to be able to get the green folder icon back.
Was this reply relevant?
+3
-4
Compumind RE: How to ignore Windows XP Pro from EOL.
Member 14th Apr, 2014 17:30
Score: 8
Posts: 54
User Since: 2nd Feb 2010
System Score: N/A
Location: US
Just ran PSI 2.0 scan...

Still showing XP Professional as being EOL, with no way to ignore it.
Again, I ask that someone from Secunia please correct this and post in this thread.

Thank you.

Compumind :(
Was this reply relevant?
+1
-1
LayaboutJoe RE: How to ignore Windows XP Pro from EOL.
Member 14th Apr, 2014 21:32
Score: 1
Posts: 1
User Since: 21st Sep 2013
System Score: N/A
Location: US
Do any of you know the internal path for Microsoft Windows XP Home and/or Professional? If the correct path was known, could not an ignore rule could be created? I, personally, haven't the expertise to discover that path.

--
'Beauty is the purgation of superfluities.' Michelangelo di Lodovico Buonarroti Simoni (1475-1564)
Was this reply relevant?
+1
-0
steffens RE: How to ignore Windows XP Pro from EOL.
Member 14th Apr, 2014 21:51
Score: 47
Posts: 62
User Since: 25th Jul 2009
System Score: N/A
Location: US
It's probably more complicated than that.

For a typical program, all you need is the path to the file that PSI uses to determine the version of said program. With that you can create a ignore rule that works.

For the OS, my guess is that PSI does NOT look for a file, but rather does a syscall that returns OS version info. No path, and hence no way to write an ignore rule.

Have to wait for Secunia to add something to PSI. And even if they do that for PSI 3, they probably will NOT backport the fix to PSI 2. So those of us who have stuck with PSI 2 for one reason or another likely will just have to live with an EOL blot on our otherwise perfect record. ;)

And personally, I'd be happy if Secunia just fixed the bogus "Windows Process Explorer" detect I noted in an earlier posting.
Was this reply relevant?
+6
-2
df5801 RE: How to ignore Windows XP Pro from EOL.
Member 16th Apr, 2014 18:51
Score: -2
Posts: 2
User Since: 27th Apr 2011
System Score: N/A
Location: N/A
Last edited on 16th Apr, 2014 18:52
I have PSI 3 on my old XP Home computer which I am cleaning prior to mothballing

I am getting the "Microsoft Windows XP Professional" Click to update - which is very confusing - XP Professional has never been anywhere near this computer.

I am also getting the "Microsoft Removal Tool Blaster/Nachi" Click to Update. I have renamed the old version and run the Scan again but still get the message - clicking has no effect!

Any ideas?

BTW is there any way to downgrade PSI back to version 2?
Was this reply relevant?
+2
-3
taffy078 RE: How to ignore Windows XP Pro from EOL.
Contributor 17th Apr, 2014 08:09
Score: 408
Posts: 1,335
User Since: 26th Feb 2009
System Score: 100%
Location: UK
df5801:

Re Blaster Nachi, take a look at this:


http://secunia.com/community/forum/thread/show/143...

--
taffy078, West Yorkshire, UK

Desktop: Compaq Presario (OEM) 32 bit / AMD Athlon / 2 GB RAM
XP Home - SP3/ IE8/ Norton IS - Secunia PSI v2.0.0.3003

Laptop: Win 7 / IE11 / PSI v2.0.0.3003
Was this reply relevant?
+3
-2
df5801 RE: How to ignore Windows XP Pro from EOL.
Member 17th Apr, 2014 14:09
Score: -2
Posts: 2
User Since: 27th Apr 2011
System Score: N/A
Location: N/A
Last edited on 17th Apr, 2014 14:11
Thanks, that link also points to Having Problems with the Microsoft Removal Tool for Blaster/Nachi? ( https://secunia.com/community/forum/thread/show/13... ) which seems to say that it (Microsoft Removal Tool for Blaster/Nachi?) can be safely deleted - but there is a backup lurking on the system that needs to be deleted first (use a search - the one not in \system32\ is the backup)
Was this reply relevant?
+1
-2
taffy078 RE: How to ignore Windows XP Pro from EOL.
Contributor 17th Apr, 2014 14:18
Score: 408
Posts: 1,335
User Since: 26th Feb 2009
System Score: 100%
Location: UK
Last edited on 17th Apr, 2014 14:52
df5801 - I have just had to uninstall and reinstall PSI to resolve a problem with Flash.

I've just scanned and I've got the Blaster Nachi back (previously ignored) and the link to the latest MS Malicious Software Removal tool. I installed it again (as it's been a while since I last did it) - quick scan = OK but this new Tool doesn't appear in my list of installed programs - is it an add-on?

Re your comment "but there is a backup lurking on the system that needs to be deleted first (use a search - the one not in \system32\ is the backup)". I can't find it. I'll look at the path of the ignored one and see if I can find it from there.

--
taffy078, West Yorkshire, UK

Desktop: Compaq Presario (OEM) 32 bit / AMD Athlon / 2 GB RAM
XP Home - SP3/ IE8/ Norton IS - Secunia PSI v2.0.0.3003

Laptop: Win 7 / IE11 / PSI v2.0.0.3003
Was this reply relevant?
+4
-3
taffy078 RE: How to ignore Windows XP Pro from EOL.
Contributor 17th Apr, 2014 14:57
Score: 408
Posts: 1,335
User Since: 26th Feb 2009
System Score: 100%
Location: UK
well, that's strange! Ignored prograns previously appeared at the end of the scan results, greyed out, didn't they. Blaster Nachi ain't there now - I give up.

--
taffy078, West Yorkshire, UK

Desktop: Compaq Presario (OEM) 32 bit / AMD Athlon / 2 GB RAM
XP Home - SP3/ IE8/ Norton IS - Secunia PSI v2.0.0.3003

Laptop: Win 7 / IE11 / PSI v2.0.0.3003
Was this reply relevant?
+4
-3
Anthony Wells RE: How to ignore Windows XP Pro from EOL.
Expert Contributor 17th Apr, 2014 16:05
Score: 2437
Posts: 3,323
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi all ,

FYI , the PSI is not able to differentiate between the various versions of XP but this does/did not (usually) prevent correct ID of missing patches , etc.

This thread has probably the most information re: BlasterNachi and also the current Microsoft tool which replaced it :-

http://secunia.com/community/forum/thread/show/133...

In the PSI 2.x version the "ignore rules" are found via Dashboard->Configuration->Settings ->...

Hope that helps

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+4
-1
Anthony Wells RE: How to ignore Windows XP Pro from EOL.
Expert Contributor 17th Apr, 2014 16:30
Score: 2437
Posts: 3,323
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi df5801 ,

The PSI version 2.x is not a downgrade nor 3.x an upgrade . Each product has a different user target . You can get 2.0.0.4003 here ; on the rhs , it's the first link below the main green download link (for 3.x):-

https://secunia.com/products/consumer/PSI/sys_req/

If you want 2.0.0.3003 , you'll need to wait for Maurice Joyce to provide a link for you .

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+5
-4
Compumind RE: How to ignore Windows XP Pro from EOL.
Member 17th Apr, 2014 17:00
Score: 8
Posts: 54
User Since: 2nd Feb 2010
System Score: N/A
Location: US
Last edited on 17th Apr, 2014 17:05
Hi all,

I think we are getting a bit off topic here, LOL.

I am using PSI version 4003 - How can I can exclude Win XP Pro from detection?
Simple request, no? Why has not Secunia responded?

TIA,

Compumind :)
Was this reply relevant?
+1
-0
taffy078 RE: How to ignore Windows XP Pro from EOL.
Contributor 17th Apr, 2014 17:53
Score: 408
Posts: 1,335
User Since: 26th Feb 2009
System Score: 100%
Location: UK
(1) Thanks to whoever gave me the two '-1' scores, presumably because I tried to help df5801.
I'd do it again - scoring points ain't as important as helping, even when off-topic, imho! Am I wrong? (That's another -1!)

(2) You won't be able to resolve this, Compumind, until Secunia get their finger out, as I said in my post 11th Apr, 2014 10:50. I've reminded them today.

(3) Sorry to disagree with you Anthony (How are you? Well I hope) but anyone wanting to install PSI 2.0.0.3003 should go to the same page

http://secunia.com/products/consumer/PSI/sys_req/

where the link to PSI 2.0.0.3003 is on the right-hand side.



--
taffy078, West Yorkshire, UK

Desktop: Compaq Presario (OEM) 32 bit / AMD Athlon / 2 GB RAM
XP Home - SP3/ IE8/ Norton IS - Secunia PSI v2.0.0.3003

Laptop: Win 7 / IE11 / PSI v2.0.0.3003
Was this reply relevant?
+3
-2
Anthony Wells RE: How to ignore Windows XP Pro from EOL.
Expert Contributor 17th Apr, 2014 17:59
Score: 2437
Posts: 3,323
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hello @Compumind ,

I was simply trying to help those people making requests -albeit off topic . If you do not wish to help others by all means give me a thumbs down ; although you should know that I care not for marks and will always try to respond/help when I can .

As for your hope of Support responding here by repeating by your postings , well , until/unless they have rectified/modified their detection rules , well , for your own sake , do not hold your breath . Taffy has already told you as much as you are likely to get before the developers spring into action .

Patience is a virtue in this world of instant expectation/gratification .

Take care

Anthony


--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+9
-0
Compumind RE: How to ignore Windows XP Pro from EOL.
Member 17th Apr, 2014 18:37
Score: 8
Posts: 54
User Since: 2nd Feb 2010
System Score: N/A
Location: US
Hello Anthony and others,

Don't get me wrong... in the scheme of life this is not a high priority!

Just would like Secunia to post and say when they will fix this issue.
And yes, it is best to always help others...

FWIW,

Compumind
Was this reply relevant?
+1
-0
Compumind RE: How to ignore Windows XP Pro from EOL.
Member 22nd Apr, 2014 16:13
Score: 8
Posts: 54
User Since: 2nd Feb 2010
System Score: N/A
Location: US
Hmm...

Surprised that Secunia has not posted here concerning this issue!
Their support used to be better... IMO.

Was this reply relevant?
+0
-0
taffy078 RE: How to ignore Windows XP Pro from EOL.
Contributor 22nd Apr, 2014 18:05
Score: 408
Posts: 1,335
User Since: 26th Feb 2009
System Score: 100%
Location: UK
Last edited on 22nd Apr, 2014 18:09
I suggest that you email them (support@secunia.com).

Judging by the way that the earlei bloodshed over the scores have been deftly and calmly cleaned up, I imagine that they have already visited us!

But yes - it would be nice for them to pop in and speak to us - even if only to say "nothing to report"!

If you look at the way in which a PSI scan score of 100% is described when you are about to join PSI, they must realise how important 100% is to us and how frustrating it is to see no news.

--
taffy078, West Yorkshire, UK

Desktop: Compaq Presario (OEM) 32 bit / AMD Athlon / 2 GB RAM
XP Home - SP3/ IE8/ Norton IS - Secunia PSI v2.0.0.3003

Laptop: Win 7 / IE11 / PSI v2.0.0.3003
Was this reply relevant?
+3
-1
Compumind RE: How to ignore Windows XP Pro from EOL.
Member 28th Apr, 2014 18:56
Score: 8
Posts: 54
User Since: 2nd Feb 2010
System Score: N/A
Location: US
Problem still not resolved.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability