Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Ignore Rule

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
Hannagj Ignore Rule
Member 16th Jan, 2010 21:07
Ranking: 7
Posts: 15
User Since: 19th Dec, 2009
System Score: N/A
Location: LB
Hi.
After running a scen with PSI the program says after finishing :
PSI suggested ignore rule: C:\SWsetup\.
Note: If you create an ignore rule for specific directories & files, PSI will not inform you about any potential secutity risks these programs might expose your system to.We recommand that you create abd use these rules with care.
Rule name: Default windows restore/backup folder .
If PSI suggeste this ignore rule so why is the warning for?
And shull I applay this rule or not.?
Any help will be welcome. Thanks



--
John

HP Pavilion DV6
Win7 64bit-IE8
BitDefrender 2010 + Malwarebytes

mogs RE: Ignore Rule
Expert Contributor 16th Jan, 2010 21:41
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
The wording of your post seems to suggest that you have instigated the warning, by giving the Ignore rule a name ?
I havn't had any occasion to use it as yet : forgive me if I've interpreted it wrongly.

--
Was this reply relevant?
+0
-0
Anthony Wells RE: Ignore Rule
Expert Contributor 16th Jan, 2010 22:20
Score: 2434
Posts: 3,317
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 16th Jan, 2010 22:32
@hannagj ,

It would seem to be a back up folder particular to HP , this link (provided by "googling" "SWsetup") may help :-

http://www.windowsbbs.com/windows-xp/79471-hp-note...

The ignore rule will stop PSI displaying the out of date/insecure items in this "back up" folder ; PSI will still scan the folder .

A back up folder is usually not readily accessible to the bad guys .

Hope this helps
Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
This user no longer exists RE: Ignore Rule
Member 16th Jan, 2010 23:06
Hannagj, you do not indicate in your signature what anti virus application you use.

Malwarebytes' Anti-Malware (MBAM) is a good compliment to the anti virus application:
http://www.malwarebytes.org/mbam.php

WinPatrol is a good application to have as it is a powerful system monitor that alerts you to any changes that may occur without your knowledge:
http://www.winpatrol.com
Was this reply relevant?
+0
-0
Hannagj RE: Ignore Rule
Member 16th Jan, 2010 23:37
Score: 7
Posts: 15
User Since: 19th Dec 2009
System Score: N/A
Location: LB
Last edited on 16th Jan, 2010 23:40
@MOGS
What I wrote in the thread was the exact words of PSI and i've never give a name for an ignore rule.I have made a screenshot of the problem but i don't know how to send these shots.

@Anthony Wells
i have visited the site you gave me but it seems nothing is clear about the SWsetup folder, but all i wanted to know why PSI suggested the ignore rule?

TO MOGS , Anthony & Yokenny Many thanks for your responses and by the way i use Bit Defender 2010 like antivirus.

John


--
John

HP Pavilion DV6
Win7 64bit-IE8
BitDefrender 2010 + Malwarebytes
Was this reply relevant?
+0
-0
This user no longer exists RE: Ignore Rule
Member 16th Jan, 2010 23:55
It would be good to put Bit Defender 2010 in the signature.

I will have to look on my XP Pro system as it has a Folder I choose to ignore as it is a down level application for WinDVD Gold 5 that is an application I choose not to get rid of so choose to ignore the Secunia PSI warning.
Was this reply relevant?
+0
-0
Anthony Wells RE: Ignore Rule
Expert Contributor 17th Jan, 2010 00:16
Score: 2434
Posts: 3,317
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hello John ,

PSI is suggesting you use an ignore rule as it is a back up folder ; you "may" need some of the old/out of date files , such as drivers , for a system restore (as per the linked article , no one seems sure) ; without the rule set , PSI will detect and display various programmes in the folder as "insecure" or "end of life" or "patched" .

If you cannot access/should not update them as they are in this "back up" folder , then they may confuse themselves with other really important vulnerabilities and they will reduce your % score (should that be important to you).

PSI will still scan the folder , the ignore rule is just a convenience , it's for you to decide .

You might ask HP to confirm if the folder is accessible or not to the bad guys , if it isn't you can ignore it .

Hope that is clearer , if long winded.
Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
Maurice Joyce RE: Ignore Rule
Handling Contributor 17th Jan, 2010 01:37
Score: 11631
Posts: 8,917
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 17th Jan, 2010 01:38
The SWsetup folder is unique to HP/Compaq/Voodoo Notebooks.

It will almost certainly contain old & therefore vulnerable updates from the HP download site.

There is no exposure therefore Secunia have offered a safe way to stop PSI from nagging U about these issues.

U can also burn the folder contents (could be as much as 2GB) to DVD & delete the folder.

Better still just delete the folder. All it should contain is updates (HP name them SP ......) which can easily be re downloaded from the HP site if the need ever arises.


00:35 17/01/2010


--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
Hannagj RE: Ignore Rule
Member 17th Jan, 2010 10:01
Score: 7
Posts: 15
User Since: 19th Dec 2009
System Score: N/A
Location: LB
Hello all
Many thanks for your advices.
I've found a way to send my screenshots if you wish to see :
http://tinypic.com/3ia2ox3r

Again Thank you.

--
John

HP Pavilion DV6
Win7 64bit-IE8
BitDefrender 2010 + Malwarebytes
Was this reply relevant?
+0
-0
Maurice Joyce RE: Ignore Rule
Handling Contributor 17th Jan, 2010 11:26
Score: 11631
Posts: 8,917
User Since: 4th Jan 2009
System Score: N/A
Location: UK
John,
That looks OK. It is a safe way to keep the folder but not be annoyed by PSI constantly telling U that it is insecure.

SWsetup & the i386 folder,any back up hard drives or OEM reinstallation partitions could have vulnerrabilities but there is no exposure & it is safe to ignore.

The warning from Secunia is Global & correct. It is very unwise to create an ignore rule unless U are 100% certain there is no exposure.

In this case it is 100% secure hence the advice from them.



--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
Hannagj RE: Ignore Rule
Member 17th Jan, 2010 20:11
Score: 7
Posts: 15
User Since: 19th Dec 2009
System Score: N/A
Location: LB
Last edited on 17th Jan, 2010 20:14
Maurice
Thank you for your help with all the other members.
It was very helpful to understand the role of the ignore rule in these circumstances.
Hope that others from this community take advantage of this thread.

By the way my score dosn't appear on my profile How can i make it visible to other users?


--
John

HP Pavilion DV6
Win7 64bit-IE8
BitDefrender 2010 + Malwarebytes
Was this reply relevant?
+0
-0
Maurice Joyce RE: Ignore Rule
Handling Contributor 18th Jan, 2010 16:44
Score: 11631
Posts: 8,917
User Since: 4th Jan 2009
System Score: N/A
Location: UK
John,
U are not the first to mention this problem.

At the top of this thread FORUM is highlighted in Orange.

Click SECUNIA PROFILE next to it.

In there are all your details. There should be a box that U can tick to expose your score?

Sadly some have reported this missing - not sure why.

If it is not present may be a good idea to contact Secunia Support. All your other details show correctly so U have clearly set it up correctly apart from your score.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
Hannagj RE: Ignore Rule
Member 18th Jan, 2010 21:05
Score: 7
Posts: 15
User Since: 19th Dec 2009
System Score: N/A
Location: LB
Last edited on 18th Jan, 2010 21:07
Hello Maurice
Probably i'm not the only one who mention this.
Perhaps you can look at a screenshot i've made-it to my profile
& tell me what you think before contacting Secunia support.
http://i45.tinypic.com/jhg7q9.jpg


thank you.
P.S: I have put the c:\swsetup in ignore rule.

--
John

HP Pavilion DV6
Win7 64bit-IE8
BitDefrender 2010 + Malwarebytes
Was this reply relevant?
+0
-0
Maurice Joyce RE: Ignore Rule
Handling Contributor 18th Jan, 2010 21:54
Score: 11631
Posts: 8,917
User Since: 4th Jan 2009
System Score: N/A
Location: UK
It is missing the box to tick - It should be immediately below settings - I would copy the picture to support or ask them to read this thread.


With that ignore rule U will still be safe.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
Hannagj RE: Ignore Rule
Member 18th Jan, 2010 22:44
Score: 7
Posts: 15
User Since: 19th Dec 2009
System Score: N/A
Location: LB
Thank you very much Maurice for the provided and quick responses.


--
John

HP Pavilion DV6
Win7 64bit-IE8
BitDefrender 2010 + Malwarebytes
Was this reply relevant?
+0
-0
Anthony Wells RE: Ignore Rule
Expert Contributor 18th Jan, 2010 23:03
Score: 2434
Posts: 3,317
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 18th Jan, 2010 23:05
Hello John ,

You are not alone , I posted this on another thread to show you what you "should" see :-

http://picasaweb.google.com/forsecunia/ScreenCaptu...

Anthony

Sorry , the link doen't seem to copy , it's from this thread (scroll down) :-

http://secunia.com/community/forum/thread/show/333...

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
thedillpickl RE: Ignore Rule
Contributor 19th Jan, 2010 06:55
Score: 376
Posts: 872
User Since: 3rd May 2009
System Score: 100%
Location: US
Hi John;

Sorry to be posting late to this thread. On my HP I use PSI scan of SWSetup to let me know when something has been "dumped" there. I look at it and trash it. There never has been anything truly need in there.

I agree about the way Secunia suggests an ignore rule for this. I would assume they are trying to make it as easy as possible for everyone.


Fred

--
XP Home
Chrome, Firefox, IE8
--
consilio et animis
Was this reply relevant?
+0
-0
Hannagj RE: Ignore Rule
Member 19th Jan, 2010 18:30
Score: 7
Posts: 15
User Since: 19th Dec 2009
System Score: N/A
Location: LB
@ thedillpickl
Thank you for your cooperation and about the swsetup
i will delete the ignore rule from time to time to see what happens.



--
John

HP Pavilion DV6
Win7 64bit-IE8
BitDefrender 2010 + Malwarebytes
Was this reply relevant?
+0
-0
Maurice Joyce RE: Ignore Rule
Handling Contributor 19th Jan, 2010 19:05
Score: 11631
Posts: 8,917
User Since: 4th Jan 2009
System Score: N/A
Location: UK
John,
It can only be dumped there if you go to the HP website & download/install an update from there unless U personally change the install path of other 3rd party vendors to use that folder.

On that basis I would set & forget because HP issue very few updates to a system after release.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
Hannagj RE: Ignore Rule
Member 19th Jan, 2010 20:56
Score: 7
Posts: 15
User Since: 19th Dec 2009
System Score: N/A
Location: LB
Last edited on 19th Jan, 2010 21:01
Maurice
Thank you for that advice.
I will be waiting for your response about "Show Score" or, if you inlight me how to contact secunia support.

By the way Congratulations about your number ( 2000 ) posts.

--
John

HP Pavilion DV6
Win7 64bit-IE8
BitDefrender 2010 + Malwarebytes
Was this reply relevant?
+0
-0
Maurice Joyce RE: Ignore Rule
Handling Contributor 19th Jan, 2010 21:21
Score: 11631
Posts: 8,917
User Since: 4th Jan 2009
System Score: N/A
Location: UK
support@secunia.com

They are very helpful. I would attach your picture.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
thedillpickl RE: Ignore Rule
Contributor 21st Jan, 2010 04:40
Score: 376
Posts: 872
User Since: 3rd May 2009
System Score: 100%
Location: US
Hi John;

Maurice is quite correct, I do use HP Update to check for new drivers. It is very infrequent that something is downloaded. My suggestion would only work if you do the same.


Fred

@Maurice, over 2000! Fingers tired yet?

--
XP Home
Chrome, Firefox, IE8
--
consilio et animis
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability