Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: The fix for an insecure Akamai program

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Akamai
And, this specific program:
Akamai Download Manager ActiveX Control 2.x

This thread has been marked as locked.
stros29 The fix for an insecure Akamai program
Member 14th Jun, 2009 16:17
Ranking: 0
Posts: 4
User Since: 5th Dec, 2008
System Score: N/A
Location: N/A
Last edited on 14th Jun, 2009 16:18

I am getting cryptic messages because Akamai program is insecure. It has taken me "nowhere" and the Akamai program still is insecure.

Please, direct me to the fix.

Acoording to the download, if I can see the message that all is well, then the program should be good. Secunia still tells me the Akamai program is insecure.

BigDave_39 RE: The fix for an insecure Akamai program
Member 14th Jun, 2009 16:25
Score: 0
Posts: 177
User Since: 26th Nov 2008
System Score: N/A
Location: Washington, DC, US
Can you tell us what path it is detected in?

--
Big Dave
Was this reply relevant?
+0
-0
stros29 RE: The fix for an insecure Akamai program
Member 14th Jun, 2009 18:52
Score: 0
Posts: 4
User Since: 5th Dec 2008
System Score: N/A
Location: N/A
Last edited on 14th Jun, 2009 18:53
I am not a computer maven. I do not know "the path."

I downloaded a thing that had me go through some motions, which I did. I was given a message that said, something to the effect, if you can read this, the Akamai is ok. Up to there all seems ok.

Secunia still sees the program as insecure.
Was this reply relevant?
+0
-0
BigDave_39 RE: The fix for an insecure Akamai program
Member 14th Jun, 2009 19:47
Score: 0
Posts: 177
User Since: 26th Nov 2008
System Score: N/A
Location: Washington, DC, US
When your mouse is over the entry in the PSI you should be able to see the "path", it looks something like this:
c:\Windows\Downloaded Program Files\file.ocx

Could you type this path here?

--
Big Dave
Was this reply relevant?
+0
-0
stros29 RE: The fix for an insecure Akamai program
Member 14th Jun, 2009 20:58
Score: 0
Posts: 4
User Since: 5th Dec 2008
System Score: N/A
Location: N/A
Big Dave, thanks for the replies.
The path is c:\Windows\DownloadedProgramFiles\DownloadManagerV 2.ocx
Was this reply relevant?
+0
-0
Andy_E RE: The fix for an insecure Akamai program
Member 25th Jul, 2009 21:24
Score: 0
Posts: 1
User Since: 8th Mar 2009
System Score: N/A
Location: N/A
It looks to me that the new install works fine, but it fails to remove to the old files. I opened a CMD window, changed to the directory where the old files resided and removed the files. I then tested the download manager by downloading a file from Microsoft's MSDN subscriber downloads. It worked fine.

start->run
cmd [ENTER]
cd "C:\Windows\Downloaded Program Files"
dir [ENTER]
del <filename>

where filename is the name of each insecure file (or Down*.* to get them all at once)
Was this reply relevant?
+0
-0
booyas RE: The fix for an insecure Akamai program
Member 13th Aug, 2009 21:14
Score: 0
Posts: 3
User Since: 20th Oct 2008
System Score: N/A
Location: N/A
Did exactly as told, there are 2 files:
DownloadManagerV2.inf
DownloadManagerV2.ocx
Trying to delete gives answer: access denied.
Any Sugestions?
Was this reply relevant?
+0
-0
wr RE: The fix for an insecure Akamai program
Contributor 13th Aug, 2009 23:51
Score: 308
Posts: 736
User Since: 30th Mar 2008
System Score: 100%
Location: US
Hi booyas,

You'll have to run the Command Prompt as Administrator-not sure how you access this in XP-in Vista you click Start, then All Programs, then click Accessories, when the menu opens there, right click Command Prompt & from that menu choose Run as administrator. Hope this helps you.

Regards, wr

--
HP Pavilion Slimline s3020n
Windows Vista Home Premium SP2 32 bit
AMD 64 Athlon X2
Firefox 24.4.0 ESR
The weakest link of a computer system is always sitting in front of the monitor.
Was this reply relevant?
+0
-0
booyas RE: The fix for an insecure Akamai program
Member 14th Aug, 2009 12:06
Score: 0
Posts: 3
User Since: 20th Oct 2008
System Score: N/A
Location: N/A
Last edited on 14th Aug, 2009 12:08
thanks, that helped... but
secunia says there were 2 akamai download manager activex control 2.x
as described in your advice, I managed to remove one of them, secunia says there is one more at the same place, but I can not see it when I open that folder. (using command line, etc.) Can those be under name other than "download..."?






Acer Aspire 9300
windows vista home premium 32
AMD Turion 64
Namoroka 3.6 Alpha 1
IE 8
Was this reply relevant?
+0
-0
Maurice Joyce RE: The fix for an insecure Akamai program
Handling Contributor 14th Aug, 2009 16:43
Score: 11785
Posts: 9,035
User Since: 4th Jan 2009
System Score: N/A
Location: UK
They should be both in there:

Download ManagerV2 Inf is a 1KB Set Up File

Download Manager V2 Ocx is a 44KB ActiveX Control

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
booyas RE: The fix for an insecure Akamai program
Member 14th Aug, 2009 18:34
Score: 0
Posts: 3
User Since: 20th Oct 2008
System Score: N/A
Location: N/A
here again
I managed to find out myself. after removing suggested 2 files, I could see in windows map (c:windows/Downloaded Programs Files/ that my download mannager was only wounded, but not letaly. Then I saw that manager.exe was still there, and then removed it through command prompt.
That finally did it, downloader was gone.
Was this reply relevant?
+0
-0
SecuniaArno RE: The fix for an insecure Akamai program
Member 18th Dec, 2009 19:44
Score: 0
Posts: 2
User Since: 22nd Mar 2008
System Score: N/A
Location: N/A
on 14th Jun, 2009 19:47, BigDave_39 wrote:
Could you type this path here?

An old thread but the problem just showed up here.

Paths:
c:\Windows\Downloaded Program Files\DownloadManagerV2.ocx
c:\Windows\Downloaded Program Files\Manager.exe

I always have all files displayed, no hidden files.
Neither of the above two files exists at C:\Downloaded Program Files
Was this reply relevant?
+0
-0
Maurice Joyce RE: The fix for an insecure Akamai program
Handling Contributor 19th Dec, 2009 15:21
Score: 11785
Posts: 9,035
User Since: 4th Jan 2009
System Score: N/A
Location: UK
The files will be there but U may need to "mouse over" each entry to find the exact files.

The traditional method to remove ActiveX is:

* * * Windows XP
++++++++++++++++


Launch command prompt from accessories in the programs list
type: cd c:\windows\downloaded program files
press enter
type: dir
press enter
find the correct file in the list
type: del <name of correct file without these braces>
press enter
type: exit
press enter

* * * Vista
+++++++++++

Open Start/Search
type "Command Prompt" into the search window
A Command Prompt icon will display
Right click on it
select "Run as administrator"
type: cd c:\windows\downloaded program files
press enter
type: dir
press enter
find the correct file in the list (mine was named as shown)
type: del <name of correct file without these braces>
press enter
type: exit
press enter





--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
SecuniaArno RE: The fix for an insecure Akamai program
Member 19th Dec, 2009 22:20
Score: 0
Posts: 2
User Since: 22nd Mar 2008
System Score: N/A
Location: N/A
Last edited on 19th Dec, 2009 22:23
Maurice,

Thanks for your reply.
on 19th Dec, 2009 15:21, Maurice Joyce wrote:
The files will be there but U may need to "mouse over" each entry to find the exact files.

None of the files in that folder react with a "mouse over".
Funny as it is, the folder icon is a MSIE symbol, not just plain yellow.
(unknown source)

The traditional method to remove ActiveX is: Windows XP

Launch command prompt from accessories in the programs list
type: cd c:\windows\downloaded program files

Not accessible. Because of spaces, tried additionally putting the file name in brackets, as well as quotation marks.
dir/w was ignored dir/p allows to page through the Windows folder but does [b]not[b] display [i]downloaded program files[i].
(unknown source)
press enter
type: dir
press enter
find the correct file in the list
type: del <name of correct file without these braces>
press enter
type: exit
press enter

http://i49.tinypic.com/2z5nd7a.jpg

Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer