Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Google gears

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Google
And, this specific program:
Google Gears 0.x

This thread has been marked as locked.
cybersurfer Google gears
Member 27th Apr, 2010 08:58
Ranking: -9
Posts: 45
User Since: 7th Sep, 2009
System Score: N/A
Location: N/A
Originally posted in CSI because I didn't know.
I installed google gears a while back to see if it did me any good.
Long story short, I ended up removing it but it still shows up as "end of life" in the scan.
Not to mention it tells me my java is also out of date, but yet when I check it out,its up to date. Does Secunia intend on fixing their program or do I remove it from my pc?
I bust my rear to make sure my pc is up to date, I don't need a program giving me false positives.

TiMow RE: Google gears
Dedicated Contributor 27th Apr, 2010 09:08
Score: 737
Posts: 728
User Since: 26th Jun 2009
System Score: N/A
Location: CH
Hi cybersurfer

When posting under CSI - the corporate version of PSI - this tends to limit the input from the average user/member, as more specialist assistance is required - direct from Secunia, or other CSI users. This is a fully paid up service, so as you seem willing to uninstall, I will assume that you have just chosen the wrong forum heading.

I too, like mogs, have only encountered gears in conjunction with Chrome, and am unaware of it's use(s) anywhere else (although, this could be ignorance on my part).

It is always best to include precise version numbers, so other members can compare to their own, and relate to this, when assessing an issue.

The version number I am showing (in conjunction with Chrome), is 0.5.33.0, and I believe this to be the latest, as it was included in a recent update of Chrome. If you too show this, then you are also up to date - if not, all you need to do is to delete the file.

It is always a pity when users are willing to deride a free service, such as PSI, when often the root of the problem lies elsewhere.

BUT, it is possible, that at the moment there could be some founding in this viewpoint. Unfortunately, what is normally a very reliable service, has recently suffered from what appears to be, a relatively small flaw.

What has seemed to have solved a variety of false reporting problems, is to un- and re- install PSI. This is particularly relevant if your current version is 1.5.0.0. - the latest is 1.5.0.1, which is not a required update (just language additions).

You may have already tried this, or it may not solve your particular problem, as you write it has been ongoing for some while. And of course you are free to dispense with a free service.

TiMow

EDIT: this reply was originally written before you moved forum headings - the original was already locked, so I'm now sending it to your new thread - the first para. can be disregarded, but I've left it for info. purposes.

--
Computing is not yet a perfect science - it still requires humans.
Was this reply relevant?
+1
-0
mogs RE: Google gears
Expert Contributor 27th Apr, 2010 09:10
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
One step at a time then....are you using PSI with the Advanced interface ? Top right of the PSI panel.....Simple in blue....Advanced in black. You'll be able to gain more info.

--
Was this reply relevant?
+0
-0
TiMow RE: Google gears
Dedicated Contributor 27th Apr, 2010 09:20
Score: 737
Posts: 728
User Since: 26th Jun 2009
System Score: N/A
Location: CH
I tried to re-edit my last reply but mogs' latest reply prevented that - we seem to be playing ping-pong.

I see that you are now reporting a discrepancy with Java.

If you have JRE 1.6.x / 6.x (6.0.200.2), then this is also the latest update.

If this is the case, then this is another PSI false reporting error, that again points to my above suggestion.

TiMow

--
Computing is not yet a perfect science - it still requires humans.
Was this reply relevant?
+0
-0
cybersurfer RE: Google gears
Member 27th Apr, 2010 09:24
Score: -9
Posts: 45
User Since: 7th Sep 2009
System Score: N/A
Location: N/A
I will uninstall/reinstall to see if that works, thanks & I'll be more patient.
Was this reply relevant?
+0
-1
TiMow RE: Google gears
Dedicated Contributor 27th Apr, 2010 09:34
Score: 737
Posts: 728
User Since: 26th Jun 2009
System Score: N/A
Location: CH
Let us know if it solves the problems.

You will probably need to reboot and run a full PSI scan, afterwards though.

TiMow

--
Computing is not yet a perfect science - it still requires humans.
Was this reply relevant?
+0
-0
cybersurfer RE: Google gears
Member 27th Apr, 2010 20:45
Score: -9
Posts: 45
User Since: 7th Sep 2009
System Score: N/A
Location: N/A
When I originally installed Secunia PSI, I was using the SIMPLE mode because I'm not an advanced type person. However, later I thought I'd have a look. It did'nt seem too difficult so I thought I'd try it.
As with anything, a few items went smoothly,others more difficult.
As for google gears, the FF addon said it would "Gears is an open source project that enables more powerful web applications, by adding new features to your web browser:"
I guess I miss understood that, thus I uninstalled it.
I check my java at least once a month & its always the latest version.
I only started using Secunia PSI because my filehippo updater quit working unfortunatly. Now I jump from forum to forum to see what the latest updates are.
I did follow ALL the directions in both SIMPLE & Advanced but Advanced kept telling me a program was out dated even after I ran the scan over.
I did uninstall/reinstall Secunia & no difference.
I'm going back to the SIMPLE part & stay there.
Was this reply relevant?
+0
-1
mogs RE: Google gears
Expert Contributor 27th Apr, 2010 22:42
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
Had to go out this morning....knew someone else would pick up on your thread.
Sorry to hear you've decided not to persevere with the Advanced interface...you'd have benefitted a lot from it. What's the rush ? Take it one day at a time....it's surprising how much further you would be in a month. Anyrate whatever you decide.....best wishes.

--
Was this reply relevant?
+0
-0
cybersurfer RE: Google gears
Member 27th Apr, 2010 23:35
Score: -9
Posts: 45
User Since: 7th Sep 2009
System Score: N/A
Location: N/A
I'd rather stay with the advanced mode,but when you do a fix,re scan & it still says its out of date & you re try it over & over over a period of a few days/week,it got frustrating.
If you run a virus scan & it comes up clean,are you going to re run it till it finds something?
In my humble opinion, when I use a program to scan my pc & it tells me how to fix it & I do EXACTLY what it says & I even reboot whether or not told to do so & it still don't say its fixed,obviously something is wrong.
I hope this is clear :):)
Was this reply relevant?
+0
-1
mogs RE: Google gears
Expert Contributor 28th Apr, 2010 07:59
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
Yeah....I understand your frustrations cybersurfer.....but if you give yourself a chance to familiarize yourself with the workings of the Advanced mode, you'll be able to sort these things out, and more, as the days go by.
Often, what PSI finds, is older files and versions, sometimes tucked away somewhere; forgotten, or left over after an update. The updated version, if in Secunia's monitoring list, will appear under the Patched Progs tab.
When it finds a vulnerability ( old prog/file ); it shows that under the Insecure or End of Life tab ( when the vendor has ceased supporting the program).
Now, if you're showing Insecurities, you'll see a + sign alongside it ?
When you click on that it expands.....you'll then see the file path.....that can be used to delete the insecurity/old file.. The file path can be confirmed by clicking on Tech Details.
The things that are causing you frustration.....all those things have a file path....make a note of them.....post them back to the forum and we can start ironing out.
I've got to go to work soon; I'll probably be back on this evening. Others are always willing to try to help you....just take a bit of time to get used to the set up.

--
Was this reply relevant?
+1
-0
cybersurfer RE: Google gears
Member 28th Apr, 2010 08:31
Score: -9
Posts: 45
User Since: 7th Sep 2009
System Score: N/A
Location: N/A
Thanks, I'll be a bit more patient & try to figure it out.:):)
Was this reply relevant?
+0
-1
Maurice Joyce RE: Google gears
Handling Contributor 28th Apr, 2010 10:30
Score: 11569
Posts: 8,889
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Just tells us the path(s) to any vulnerability U have.

FINDING A VULNERABILITY FILE PATH
=================================

To locate the exact file that the Secunia PSI has detected, use or switch to the ADVANCED interface, then :

1 Click on the + sign of the programme to "expand' it.
2 Click on Technical Details in the Toolbox to see the installation path of the detected file. (Copy (CTRL+C) & paste (CTRL+V) the Installation Path of the file back to the Forum if U are unsure what to do next.

Revision 2




--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
cybersurfer RE: Google gears
Member 28th Apr, 2010 10:36
Score: -9
Posts: 45
User Since: 7th Sep 2009
System Score: N/A
Location: N/A
If I did it correctly,here Technical details


Technical details about this installation of Google Gears 0.x, you can use this information to determine why the Secunia PSI detected the program and the security state of it.

Version Detected:
0.4.24.0

Installation Path:
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\Plugins\gears\gears .dll

Last Inspection of Program:
27th Apr. 2010, 23:45 CET

Was this reply relevant?
+0
-0
TiMow RE: Google gears
Dedicated Contributor 28th Apr, 2010 14:35
Score: 737
Posts: 728
User Since: 26th Jun 2009
System Score: N/A
Location: CH
Last edited on 28th Apr, 2010 16:18
Hi cybersurfer

First opportunity I've had in last 24hrs.

Now, hopefully you know a bit more, we can try to rectify this problem. Rather than enter a question and answer session, which can be time consuming, I will try to outline some possible remedies.

As you've now included exact version number of gears, we can see that, despite what you may think, it is out of date. When you include precise information, much time and hassle can be saved.

The latest version number is: 0.5.33.0 - you have: 0.4.24.0 - which is old, and is why PSI is reporting it as end of life.

1) Have you tried clicking the "Download Solution" icon to the right of where Gears is showing in the End of Life tab ( this can also be found by clicking "[+]" - it is the first toolbox icon)? Reboot and full re-scan may be required.

2) Your file path shows as follows:

C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\ Plugins\gears \gears .dll

My file path shows as follows:

C:\Documents and Settings\<my name>\Local Settings\Application Data\Google\Chrome\Application\ 4.1.249.1059 \gears.dll

As you can see, there is a slight difference, where I've made it bold print. I'm using Windows XP (gears shows as a sub-folder under the latest Chrome version no.) - you haven't stated your Windows platform - but if it's Vista or W7, your file path may be normal for your system; but you may have this as an additional version, from your initial installation - in which case it can be removed (deleted).

3) Under patched tab, are you also showing Google Gears 0.x v.0.5.33.0 (in addition to the old version in end of life)? If you are, is the file path the same as your old version, or is it similar to mine (sub folder of Chrome version no.)? Again, if this is so, then you can delete the end of life version no.

4)Do you also now use Chrome?; and if so, are you running the latest Chrome update (4.1.249.1059)? If not, in Chrome > Tools (spanner - top right) > About Chrome > will automatically perform update check (although this has been reporting 4.1.249.1045 as up to date). You may have to go to Chrome website and re-download and re-install latest Chrome - this is also an option to get the correct Gears version, as it is automatically included with Chrome installation.

5) If you don't use Chrome, this could be why Gears doesn't update, as it would normally, with the Chrome updates.

Probably, enough for now - hopefully not information overload (comp. time is a problem for me today) - just deal with it as one point at a time - and post back if you have any queries.

TiMow

--
Computing is not yet a perfect science - it still requires humans.
Was this reply relevant?
+1
-0
cybersurfer RE: Google gears
Member 28th Apr, 2010 21:00
Score: -9
Posts: 45
User Since: 7th Sep 2009
System Score: N/A
Location: N/A
My apologies. I'm using XP Media Center Edition.
I removed Google gears because it said it was a thingy to enhance browser apps,i think. close enough.
I do have the latest version of Google Chrome but seldom use it.
My default browser is Firefox & I also use SeaMonkey.
Was this reply relevant?
+0
-0
TiMow RE: Google gears
Dedicated Contributor 29th Apr, 2010 10:02
Score: 737
Posts: 728
User Since: 26th Jun 2009
System Score: N/A
Location: CH
OK cybersurfer

Lets try to finish this. Although you say you've already removed Gears, PSI is still finding this out of date version, (in the place the file path indicates), so we need to delete this.

Firstly, if you're happy that the latest gears (0.5.33.0 - that Chrome uses) is listed under patched, as a sub-file of the 4.1.249.1059 ** folder, where it is normally located, we can properly remove this stand alone, end of life version.

Where Gears is listed under Insecure tab, click on [+] to expand, then the toolbox icon "Open Folder". This will probably take you to the Plugins folder (or possibly the Gears folder). I don't have this installation or file path, so I cant say for certain.

If Plugins is highlighted on l.h.s. of windows explorer page, then double click this - this should show Gears folder icon on r.h.s. (or Gears if highlighted on l.h.s.) - double click this - to show now the gears.dll (green and yellow gear wheels icon), 0.4.24.0., also on r.h.s.

Right click and delete.

If gears.dll 0.4.24.0 is the only contents of the Gears folder, then the folder can be deleted; if the Gears folder is the only contents of Plugins folder, then Plugins can be deleted.

In short, delete as far back in the file path as you can, but only when there are no other contents in each of the folders.

If you have any uncertainties, you may want to consider creating a restore point, prior to any deletions - so you can always return to that point if necessary.

The deletions are now in recycle bin and should be further deleted from here.
Reboot and full re-scan PSI.

If you still have a Java problem, then probably best to start a new thread (for the Java experts to pick up), and include full version numbers, and again details of your windows OS.

** In the time I've been typing, I've become aware that Chrome 4.1.249.1059 is now insecure, and needs to be updated to 4.1.249.1064 (even if you don't use it). After updating, the old file will need to be manually deleted, in a similar way as outlined above.

TiMow

--
Computing is not yet a perfect science - it still requires humans.
Was this reply relevant?
+1
-0
cybersurfer RE: Google gears
Member 29th Apr, 2010 10:24
Score: -9
Posts: 45
User Since: 7th Sep 2009
System Score: N/A
Location: N/A
I will try my best to follow your directions to delete it, thanks.
Was this reply relevant?
+0
-1
cybersurfer RE: Google gears
Member 29th Apr, 2010 11:42
Score: -9
Posts: 45
User Since: 7th Sep 2009
System Score: N/A
Location: N/A
on 29th Apr, 2010 10:24, cybersurfer wrote:
I will try my best to follow your directions to delete it, thanks.


Google gears is gone. thanks.
Was this reply relevant?
+0
-0
Anthony Wells RE: Google gears
Expert Contributor 29th Apr, 2010 12:04
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hello Cybersurfer and TiMow ,

Just so you know , on my XP SP3 i also have a ...Chrome\Application\plugins\... folder even though it does not contain anything gears ; I did not load "gears" as a browser "enhancer" (as Cybersurfer did) .

As well as "gears" in the numbered Chrome version folder(s) , I do have gears in the ...Chrome\User Data\Plugin Data\... folder as data base files .

These placements are "normal" .

Deleting the old version of "gears" from the ..\Application\plugins\.. folder should be fine , deleting the plugins folder is optional .

Don't forget that the C:\ ....\Local Settings\.. folder where all the above reside is a "hidden file" , if you have not enabled the "show hidden files" ; you should still get access via the "open folder" icon in the PSI expanded page "Toolbox" , but I can't actually remember :((

Hope this is helpful .

Antony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
TiMow RE: Google gears
Dedicated Contributor 29th Apr, 2010 12:46
Score: 737
Posts: 728
User Since: 26th Jun 2009
System Score: N/A
Location: CH
Hi both

@cybersurfer

glad this insecure version has finally gone - interested to know, which folders you actually deleted (how far back the file path you went), in view of input from @Anthony Wells.

Don't forget to re-post regarding Java.

@Anthony Wells

Afternoon A.W.

thanks for additional input. This was a bit of an anomaly, as @cybersurfer had installed Gears prior to, and independently of, Chrome, as a possible enhancement for general browsing (as far as I'm aware it works solely with Chrome).

Because of the file path/location I made the deduction that if no other folders/files were contained within, certainly "gears", and possibly "plugins", then this new location was created when the stand alone gears was installed.

I have no such plugins folder under my Chrome\Apllication sub-folder - only Extensions under current Chrome v. no.

Hopefully alls well, that ends well

Regards

TiMow

--
Computing is not yet a perfect science - it still requires humans.
Was this reply relevant?
+0
-0
Anthony Wells RE: Google gears
Expert Contributor 29th Apr, 2010 13:24
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 29th Apr, 2010 13:36
Hello TiMow ,

This will tell you a little bit about the background to "gears" and it's seemingly limited future :-

http://en.wikipedia.org/wiki/Gears_(software)

A lot would seem to depend on where Google's work with Mozilla and Adobe lead the developers .

Take care
Anthony

EDIT : sorry , cannot get the url to post correctly (3 tries - no luck) , you will have to type it in for yourself .

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
TiMow RE: Google gears
Dedicated Contributor 29th Apr, 2010 13:44
Score: 737
Posts: 728
User Since: 26th Jun 2009
System Score: N/A
Location: CH
Last edited on 29th Apr, 2010 13:45
Thanks Anthony

After reading about cogs and such-like for a while, I got there in the end. I've copied the url, also to see if it pastes properly:

http://en.wikipedia.org/wiki/Gears_%28software%29

Interesting - a bit more info. for my schwammkopf, but for how long, relevant, as you say?

Regards

TiMow

--
Computing is not yet a perfect science - it still requires humans.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability