Secunia Logo  


Secunia PSI WorldMap
 
Forum Thread: Insecure and End-of-Life programs
You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Secunia PSI - Feedback and Questions

raybak
Insecure and End-of-Life programs
by raybak on 24th Oct, 2009 16:50
Posts: 3

User Since: 24th Oct, 2009

Secunia System Score: N/A

Location: N/A
Hy I ran secunia yesterday and it detected some insecure and end-of-life threads....I followed the repair link in every file, and today I see that some of the files I fixed yesterday are still listed as insecure or end of life. as I read in other posts, here are the details of the problem file.

these files are end of life

C:\Windows\System32\Macromed\Shockwave 10\SwOnce.dll
C:\Windows\System32\Macromed\Shockwave 10\SwInit.exe
C:\Windows.old\Windows\System32\Macromed\Shockwave 10\SwOnce.dll
C:\Windows.old\Windows\System32\Macromed\Shockwave 10\SwInit.exe

these files are insecure

C:\Windows.old\Windows\System32\Macromed\Flash\NPS WF32.dll
C:\Windows.old\Windows\System32\Macromed\Flash\Fla sh10b.ocx
C:\Windows.old\Program Files\QuickTime\QuickTimePlayer.exe
C:\Windows.old\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Windows.old\Program Files\DivX\DivX Web Player\npdivx32.dll
C:\Windows.old\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Windows.old\Windows\System32\Adobe\Shockwave 11\SwInit.exe
C:\Windows.old\Windows\System32\Adobe\Director\np3 2dsw.dll
C:\Windows.old\Program Files\Java\jre6\bin\java.exe
C:\Windows.old\Program Files\Java\jre1.6.0_13\bin\java.exe
C:\Windows.old\Program Files\Java\jre1.6.0_07\bin\java.exe
C:\Windows.old\Program Files\Java\jre1.6.0_06\bin\java.exe
C:\Windows.old\Program Files\Java\jre1.6.0_03\bin\java.exe
C:\Windows.old\Program Files\Java\jre1.6.0_04\bin\java.exe
C:\Windows.old\Program Files\Java\jre1.6.0\bin\java.exe

for java, and all adobe related programs, I uninstalled them and then installed them again.

thanks for help

Maurice Joyce
RE: Insecure and End-of-Life programs
by Maurice Joyce on 24th Oct, 2009 17:49
Posts: 1,844

User Since: 4th Jan, 2009

Secunia System Score: 100%

Location: Salisbury, UK
I notice many of your files have the word old added like this

C:\Windows.old\Program Files\Java\jre1.6.0_04\bin\java.exe

Is that something U have done? An explanation might help any advice given.

--
Maurice

HP Intel Pentium 4
Windows XP Home SP3
IE8

BigDave_39
RE: Insecure and End-of-Life programs
by BigDave_39 on 24th Oct, 2009 18:00
Posts: 175

User Since: 26th Nov, 2008

Secunia System Score: N/A

Location: Washington, DC, US
I do believe that the "Windows.old" is generated when you upgrade your Windows installing from one to another.

I have one on my system, which I upgraded from Vista to Windows 7.

In other words - I consider this folder as a general "backup" folder.

--
Big Dave

Maurice Joyce
RE: Insecure and End-of-Life programs
by Maurice Joyce on 24th Oct, 2009 18:33
Posts: 1,844

User Since: 4th Jan, 2009

Secunia System Score: 100%

Location: Salisbury, UK
@bigDave39

Have U created an ignore rule for that folder or deleted it?

--
Maurice

HP Intel Pentium 4
Windows XP Home SP3
IE8

BigDave_39
RE: Insecure and End-of-Life programs
by BigDave_39 on 24th Oct, 2009 19:28
Posts: 175

User Since: 26th Nov, 2008

Secunia System Score: N/A

Location: Washington, DC, US
For the time being I have ignored it, but I intend to delete it in a couple of weeks when I have verified that I don't need anything from it.

--
Big Dave

Maurice Joyce
RE: Insecure and End-of-Life programs
by Maurice Joyce on 24th Oct, 2009 20:11
Posts: 1,844

User Since: 4th Jan, 2009

Secunia System Score: 100%

Location: Salisbury, UK
@Bigdave39
Thank you.


@raybak

If what @BigDave39 has explained matches your set up U can safely create an ignore rule for that folder.

Creating A Global Ignore Rule.

1. Click on the SETTINGS Tab.
2. At the bottom of the page click on CREATE IGNORE RULE.
3. A box will appear:
In the RULE NAME type a description of the rule (My Windows Old Files)
In the RULE box type in C:\Windows.old
4. Click SAVE IGNORE RULE>CLOSE

PSI will continue to scan these files by default but the report will not be published.

Rerun a scan to verify this fact.

Shockwave.

1. Uninstall Shockwave using the Adobe uninstaller listed here:

http://www.adobe.com/shockwave/download/alternates...

2. Reboot

3. If required install the latest version from here:

http://get.adobe.com/shockwave/


@YoKenny uses Avast - hopefully he will read this thread & help U.

--
Maurice

HP Intel Pentium 4
Windows XP Home SP3
IE8

raybak
RE: Insecure and End-of-Life programs
by raybak on 25th Oct, 2009 06:07
Posts: 3

User Since: 24th Oct, 2009

Secunia System Score: N/A

Location: N/A
thanks maurice...it solved all of the problems, indeed the windows.old files I supposed were left when I updated from vista sp1 to sp2, although I don't know if it has something to do with it or not.

about the avast problem, most probably is because I got it free over the internet.

well thanks again for your help.
regards
mauro

Maurice Joyce
RE: Insecure and End-of-Life programs
by Maurice Joyce on 25th Oct, 2009 10:06
Posts: 1,844

User Since: 4th Jan, 2009

Secunia System Score: 100%

Location: Salisbury, UK
Avast is free but many use it successfully & it is secure.

Here is the link to the latest version - it also explains the fix to your insecurity.

http://www.filehippo.com/download_avast_antivirus/...


Pleased everything else worked for U.

--
Maurice

HP Intel Pentium 4
Windows XP Home SP3
IE8

raybak
RE: Insecure and End-of-Life programs
by raybak on 25th Oct, 2009 19:27
Posts: 3

User Since: 24th Oct, 2009

Secunia System Score: N/A

Location: N/A
I'm sorry...I meant that I have the avast professional, and thata I got it free from the internet.


anyways, thanks again
regards

mauro