|
|
Forum Thread: Everything is Insecure Even my anti-virus suite
You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.
This thread was submitted in the following forum:
Secunia PSI - Feedback and Questions
| BBSecunia
| Everything is Insecure Even my anti-virus suite
|
|
|
by BBSecunia on 10th Apr, 2009 01:37
|
Posts: 7
User Since: 28th Sep, 2008
Secunia System Score: N/A
Location: N/A |
How can it be that everything that is patched, is still a catagory 4 or 5 threat?
Even my CA antivirus is classified a threat.
My patched Adobe Flash 10 and Reader 9 are classified as threats.
My Media Player is a threat.
Explorer 6 and 7 are a threat.
My Net set up is a threat.
This is ridiculous.
I cannot even use my computer according to this report.
How can this be possible?
Why is there NO explanation of what threat exists AFTER patching.
I have applied every patch and get this enormous list that says everything is still a danger... nothing can be done even though the system is patched.
I still have three items that are residing in my extra hard drive backup that are called a threat and I don't see how they can be.. if I had to restore using the HD, I would just patch it.
This is enough to make an ordinary person have a heart attack. According to this report, no one should even BE on the net.
I run a firewall and I run a full security suite and I keep EVERYTHING updated... I think this is alarmist and without an explanation I cannot see a reason to purchase the program... since I am told there is nothing that can be done.
What gives??? Anyone have any idea |
|
|
| puget1
| RE: Everything is Insecure Even my anti-virus suite
|
|
|
by puget1 on 10th Apr, 2009 04:57, last edited on 10th Apr, 2009 04:57
|
Posts: 190
User Since: 21st Dec, 2007
Secunia System Score: 100%
Location: WA State, US |
You are probably dealing with a third party install e.g. anti virus,game, something you have down loaded. This program is using a platform that has become vulnerable and thus the warning. To locate who or what is using that program. 1:It may be that you need to update with that program,run a scan and see if it corrects it.2:To locate the exact file that the Secunia PSI has detected, please follow there guidelines using the
advanced interface:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
* Click on the entry of the programme to “expand” it.
* Click on Technical details to see the installation path of the detected file.
* Remember the installation path and close down the menu.
* Click Open Folder and locate the detected file. 3: you may have an incomplete uninstall of a program which secunia is finding partial files of. 4: You may have to remove the program entirely from add/remove and if it is a program you want, then create a ignore rule. 5: It could be the privacy issue with your browser If it is mozilla disable all add-ons "all" and then do your downloads or use the "temporairly allow this page" before doing your downloads 6: If you use multipul browsers then you must update with each browser i.e.Mozilla & IE8 (most common)7.You may be experiencing problems with your fire wall try to update with firewall off.
This is a composite from about all forums & fixes Hope something works It is a good forum someone will come up with the fix.
Any cosmetic changes, general upgrades or bug fixes to a programme are not reported by Secunia which is only concerned with insecure items.
If U want a general updater to compliment Secunia a link is here:
http://www.filehippo.com/ |
|
|
| michaelsalis
| RE: Everything is Insecure Even my anti-virus suite
|
|
|
by michaelsalis on 10th Apr, 2009 15:35
|
Posts: 67
User Since: 18th Feb, 2009
Secunia System Score: 98%
Location: Hythe, Kent, UK |
Are you looking at the list of patched programs? In the advanced mode there are 3 sections - 1. Insecure 2. End of life 3. Patched
In the patched list it shows all the programs Secunia has checked on your computer which have been patched and are upto date and a lot of them has a little "bar graph" showing the threat to your computer if the patch/update had not been installed. Perhaps this is what you are seeing and thought it meant that the computer was still insecure?
-- Toshiba Equium Laptop
Intel Centrino Duo
Windows Vista Ultimate SP2
IE8 |
|
|
| BBSecunia
| RE: Everything is Insecure Even my anti-virus suite
|
|
|
by BBSecunia on 10th Apr, 2009 21:51
|
Posts: 7
User Since: 28th Sep, 2008
Secunia System Score: N/A
Location: N/A |
Hello,
Thank you for taking the time to reply. There are 3 insecure programs and one end of life. All these are in my removeable backup HD. I do not see how they could make my computer vulnerable where they are. I have no games on my computer, never have. I have numerous programs I have downloaded, all from secure approved sites. I have now removed everything that could be removed without removing actual components that allow my computer to work, and the removed programs (after reboot) still come up as in my computer, patched and 4 or 5 level threats i.e. Flash, Reader, Sun Java, Quicktime, Foxit. I have updated every individual program on my computer... those I could remove and reinstall updated versions I have done so. I check and update daily on MS update. My security suite updates automatically daily. I am still getting the same secunia messages on the list of patched programs. I show a couple of dozen that are patched but still marked a threat. These include my Anti-Virus Suite, many basic components of my system, which is a year old and was a clean install not an upgrade to anything old.
I had the computer in the shop 3 months ago, (after using Secunia and getting very upset at the apparent lack of security) and they went through and made sure that everything was up to date and clean. I don't go places I shouldn't and I don't click on links, or respond to phishing emails etc. I am very security conscious.
I am not technical, and I am intimidated by the idea of doing the things you suggest. What shows in Install/Uninstall is the MS system I have and some other programs from trusted sites. I have removed from my computer programs that still show up on this patched list... so I don't know how I can "remove" them any further, because they are NOT on my Install/Uninstall list.
I do appreciate the suggestions you have offered, you obviously went to a lot of trouble to look all these things up. Thank you for doing that to help me out. My system is a custom built, business level system (built by a large firm that builds, services and maintains many large computer business systems. Nothing "extra" was loaded into this machine, like the software that clogs up off the shelf computers. I haven't had rejection problems with updates.
ARE you saying that my firewall could prevent a proper security update and I would NOT be aware of it? My ignorance about this is scary, but I did not grow up with computers or remote controls on TV's... that might give you an idea about how secure I feel about tinkering around with it. Secunia guarantees nothing if you upgrade through them, even using a paid program. This leaves me wondering why all these Security Issues still display after removal or replacement or updating. The further issue of trying out a general upgrade for a a single component on a custom built media center also gives me pause. The more items I remove, the less use the machine is. Is anyone using updated Adobe Flash, Foxit, Adobe Reader, Java, IE, Firefox, Java etc. If they are, how much danger is computer actually in?
Thanks again.
|
|
|
| BBSecunia
| RE: Everything is Insecure Even my anti-virus suite
|
|
|
by BBSecunia on 10th Apr, 2009 22:06
|
Posts: 7
User Since: 28th Sep, 2008
Secunia System Score: N/A
Location: N/A |
Hello,
Yes, I am looking at the list of patched programs. I currently have 4 insecure programs listed on the fist part... 3 insecure and 1 end of life. They are only found on my removeable backup HD.
On the list of patched programs, are a frighening number of programs, which even though patched, still show up as threats... of 4 or 5.
I have removed everything I could remove and still have the computer run. I never have downloaded games or anything from an inseure, untrusted site. After doing this, I reboot. Then I run a Scan... I have even turned off Secunia to clear it completely. Turned it back on and re run full scans and programs that are not in my computer or in my Install/Uninstall still show up on the Secunia Scan.
It says that there are no further patches or updates and the bars are still saying level 4 or 5 threat.
So, I don't know what to do... I have a computer that is just about unuseable for my basic sites.. which I use consistently. I removed Firefox when I found out that anything sent out through them is not sent encrypted... unless you take the time to actually type in a specific request to encrypt... Also, that Foxit... the fast little PDF reader... is just as vulnerable as Adobe 10x... So, I am wondering if I can even run this thing. I am behind a good fire wall... running a good security suite. Keep everything up to date... I am pretty paranoid about security... Could you tell?
Thanks for responding to my plea... I wish I knew what to do... cause this is sure taking the fun out of the net. Feeling your computer is insecure, based on the Patched List... which is what I am doing... (plus I don't know what to do about the stuff living in the HD removeable back up)... Probably nothing about that... how can it be a threat.
Thank you again for taking the time to ask that question, because it is clarifying... but as I see it... all those things that are still labeled insecure... MUST be. Right?
|
|
|
| BBSecunia
| RE: Everything is Insecure Even my anti-virus suite
|
|
|
by BBSecunia on 10th Apr, 2009 22:11
|
Posts: 7
User Since: 28th Sep, 2008
Secunia System Score: N/A
Location: N/A |
on 10th Apr, 2009 22:06, BBSecunia wrote:
CORRECTIOM:
My apologies to Firefox, it is Google that is not encrypting their email unless you request it... But from what I read, Firefox has not incorporated anything to deal with the Google issue, which I certainly didn't know about until this morning. Scratch another item to use.
Hello,
Yes, I am looking at the list of patched programs. I currently have 4 insecure programs listed on the fist part... 3 insecure and 1 end of life. They are only found on my removeable backup HD.
On the list of patched programs, are a frighening number of programs, which even though patched, still show up as threats... of 4 or 5.
I have removed everything I could remove and still have the computer run. I never have downloaded games or anything from an inseure, untrusted site. After doing this, I reboot. Then I run a Scan... I have even turned off Secunia to clear it completely. Turned it back on and re run full scans and programs that are not in my computer or in my Install/Uninstall still show up on the Secunia Scan.
It says that there are no further patches or updates and the bars are still saying level 4 or 5 threat.
So, I don't know what to do... I have a computer that is just about unuseable for my basic sites.. which I use consistently. I removed Firefox when I found out that anything sent out through them is not sent encrypted... unless you take the time to actually type in a specific request to encrypt... Also, that Foxit... the fast little PDF reader... is just as vulnerable as Adobe 10x... So, I am wondering if I can even run this thing. I am behind a good fire wall... running a good security suite. Keep everything up to date... I am pretty paranoid about security... Could you tell?
Thanks for responding to my plea... I wish I knew what to do... cause this is sure taking the fun out of the net. Feeling your computer is insecure, based on the Patched List... which is what I am doing... (plus I don't know what to do about the stuff living in the HD removeable back up)... Probably nothing about that... how can it be a threat.
Thank you again for taking the time to ask that question, because it is clarifying... but as I see it... all those things that are still labeled insecure... MUST be. Right?
|
|
|
| BBSecunia
| RE: Everything is Insecure Even my anti-virus suite
|
|
|
by BBSecunia on 10th Apr, 2009 22:13
|
Posts: 7
User Since: 28th Sep, 2008
Secunia System Score: N/A
Location: N/A |
on 10th Apr, 2009 22:11, BBSecunia wrote:
I am sorry for doing a reply to the postings, I haven't used one of these boards and didn't realize that I should have done a quote, so the person knew I was responding to them.
On the plus side, I did correct a mistake regarding Firefox and Google. |
|
|
| michaelsalis
| RE: Everything is Insecure Even my anti-virus suite
|
|
|
by michaelsalis on 10th Apr, 2009 22:45
|
Posts: 67
User Since: 18th Feb, 2009
Secunia System Score: 98%
Location: Hythe, Kent, UK |
hi
Don't worry about the programs listed in the "patched" section.
The patched programs are those that are ok or have been fixed by installing the latest version or patches. Secunia is just showing through the bar graph type symbols how much the programs would have been a risk if NOT patched. There is nothing further to do at the moment with those programs listed as patched. Secunia keeps an eye on these programs automatically and will advise if further patches are available.
The programs that are listed in the insecure and end of life sections need attention and are often downloaded as part of other programs already installed when you buy a computer or download another program you want as an example Sun Java is outomatically downloaded with the Open Office suite. Sometimes these programs are not needed or sometimes needed to make the program you want to use can work.
Usually just go to the link provided by Secunia to obtain the latest update or patch or uninstall the program if you don't need it.
-- Toshiba Equium Laptop
Intel Centrino Duo
Windows Vista Ultimate SP2
IE8 |
|
|
| Maurice Joyce
| RE: Everything is Insecure Even my anti-virus suite
|
|
|
by Maurice Joyce on 10th Apr, 2009 23:02, last edited on 10th Apr, 2009 23:02
|
Posts: 1,876
User Since: 4th Jan, 2009
Secunia System Score: 100%
Location: Salisbury, UK |
If U are absolutely sure the 4 remaining item are all on your backup drive they can be ignored. Secunia will still scan the drive by default but will not annoy U with an unneccessary warning.
Creating an IGNORE RULE
Click on the SETTINGS tab>scroll to the bottom & click on CREATE IGNORE RULE
In the RULE NAME BOX insert something like MY BACKUP DRIVE
In the RULE BOX type D:\ (or the drive letter U wish to ignore)
Click SAVE IGNORE RULE>CLOSE
Sadly, as pointed out above, U have been reading Secunia incorrectly. Anything under the PATCHED tab is up to date & secure.
-- Maurice
HP Intel Pentium 4
Windows XP Home SP3
IE8 |
|
|
| BBSecunia
| RE: Everything is Insecure Even my anti-virus suite
|
|
|
by BBSecunia on 11th Apr, 2009 01:27
|
Posts: 7
User Since: 28th Sep, 2008
Secunia System Score: N/A
Location: N/A |
Hello,
Thank you for your informative answer... I am glad I don't have to worry about the patched programs. As far as the ones kuvubg in my removeable HD backup. I don't know how to remove them. Corresponding programs in my computer are updated already. I don't know enough to mess around with that backup. LOL.
on 10th Apr, 2009 22:45, michaelsalis wrote: hi
Don't worry about the programs listed in the "patched" section.
The patched programs are those that are ok or have been fixed by installing the latest version or patches. Secunia is just showing through the bar graph type symbols how much the programs would have been a risk if NOT patched. There is nothing further to do at the moment with those programs listed as patched. Secunia keeps an eye on these programs automatically and will advise if further patches are available.
The programs that are listed in the insecure and end of life sections need attention and are often downloaded as part of other programs already installed when you buy a computer or download another program you want as an example Sun Java is outomatically downloaded with the Open Office suite. Sometimes these programs are not needed or sometimes needed to make the program you want to use can work.
Usually just go to the link provided by Secunia to obtain the latest update or patch or uninstall the program if you don't need it.
|
|
|
| BBSecunia
| RE: Everything is Insecure Even my anti-virus suite
|
|
|
by BBSecunia on 11th Apr, 2009 01:32
|
Posts: 7
User Since: 28th Sep, 2008
Secunia System Score: N/A
Location: N/A |
Hello,
Thank you for this information... the corresponding program on my computer is patched. And I have removed the end of life program. I don't know why it still shows up... but there are lots of programs that I have removed that still show up on the patched page after a Secunia scan, maybe they keep track of things I have patched.
knowing how to create an ignore rule, whew! And finding out how to read the Secunia correctly is very helpful.
But I feel much better after all the kind help extended to me on this forum.
Thanks again .
on 10th Apr, 2009 23:02, Maurice Joyce wrote: If U are absolutely sure the 4 remaining item are all on your backup drive they can be ignored. Secunia will still scan the drive by default but will not annoy U with an unneccessary warning.
Creating an IGNORE RULE
Click on the SETTINGS tab>scroll to the bottom & click on CREATE IGNORE RULE
In the RULE NAME BOX insert something like MY BACKUP DRIVE
In the RULE BOX type D:\ (or the drive letter U wish to ignore)
Click SAVE IGNORE RULE>CLOSE
Sadly, as pointed out above, U have been reading Secunia incorrectly. Anything under the PATCHED tab is up to date & secure.
|
|
|
| Maurice Joyce
| RE: Everything is Insecure Even my anti-virus suite
|
|
|
by Maurice Joyce on 11th Apr, 2009 02:15
|
Posts: 1,876
User Since: 4th Jan, 2009
Secunia System Score: 100%
Location: Salisbury, UK |
Patched programmes ALWAYS show on the PATCHED page. They should not be removed unless U decide U do not want them anymore & uninstall them via add/remove.
You only need to worry about the INSECURE & END OF LIFE TABS. Problems on these pages do require updating or permanent removal.
-- Maurice
HP Intel Pentium 4
Windows XP Home SP3
IE8 |
|
|
|