Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: End of life Security warning

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
theloft End of life Security warning
Member 9th Jun, 2010 21:15
Ranking: 0
Posts: 14
User Since: 14th May, 2010
System Score: N/A
Location: N/A
Secunia PSI keeps warning me about a Security Risk to a programme called -
eBay Enhanced Picture Services Active X Control 1.x

I proceeded to the direct download link and Downloaded compressed files to Temporary Internet Files. (there was no option to Run). These files duly downloaded - 1. EPUWAL.control and 2. EPUWAL control.dll

However as soon as I attempt to extract these files all my pc does is try to put them into the Temporary Internet Files folder and advises that there is already an existing folder, do I want to replace it !!!. I have tried to extract to desktop but no luck there. Can anyone please advise me what I should do next. Trying to apply this patch is driving me nuts! I have re-scanned and 2 other patches which I was able to download successfully, have worked OK. but not this one.

Maurice Joyce RE: End of life Security warning
Handling Contributor 9th Jun, 2010 21:28
Score: 11610
Posts: 8,906
User Since: 4th Jan 2009
System Score: N/A
Location: UK
REMOVING ACTIVEX
=================
The traditional method to remove ActiveX is:

* * * Windows XP
++++++++++++++++


Launch the command prompt from accessories in the programs list or go to Start>run> and type cmd in the box that appears.
type: cd c:\windows\downloaded program files
press enter
type: dir
press enter
find the files you wish to remove from the list that appears
type: del (now type the details of the file found above)
press enter
type: exit
press enter

* * * Vista
+++++++++++

Click Start>In the search box type cmd
A Command Prompt icon will display at the top
Right click on it & select "Run as administrator"
type: cd c:\windows\downloaded program files
press enter
type: dir
press enter
find the file you wish to remove from the list that appears
type: del (now type the details of the file found above)
press enter
type: exit
press enter

Windows 7
+++++++++
Life is much simpler with Windows 7.

Just note the FILE PATH of the insecurity highlighted by Secunia by clicking the + sign next to the entry> click OPEN FOLDER in the toolbox>a screen will appear>click OK>now select the file noted in the FILE PATH right click & zap it.

If this post has solved your problem could you please select the ACCEPT option. This will lock the thread and stop you & I from receiving unnecessary update emails.

Revision 1

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
ddmarshall RE: End of life Security warning
Dedicated Contributor 9th Jun, 2010 21:42
Score: 1205
Posts: 956
User Since: 8th Nov 2008
System Score: 98%
Location: UK
Last edited on 9th Jun, 2010 21:55
Have a look at this:
http://pages.ebay.com/securitycenter/activex/index...

eBay seem to be in the process of phasing this out. Your best option might be to uninstall it.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+1
-0
theloft RE: End of life Security warning
Member 10th Jun, 2010 09:05
Score: 0
Posts: 14
User Since: 14th May 2010
System Score: N/A
Location: N/A
Last edited on 10th Jun, 2010 09:06
thanks for replies. I am running Vista Home Premium.
Maurice, I carried out your instructions but could not see the problem file in the list. The list commenced with - 9.008.ver.dll and finished with 59.904.zlibi.dll. In other words only v to z. Is this correct and would the file be hidden under another name ? Sorry to be so naive but not really a techie.
Was this reply relevant?
+0
-0
Maurice Joyce RE: End of life Security warning
Handling Contributor 10th Jun, 2010 09:22
Score: 11610
Posts: 8,906
User Since: 4th Jan 2009
System Score: N/A
Location: UK
It could be - right click on each entry & select PROPERTIES. That will give U details of what it belongs to.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
theloft RE: End of life Security warning
Member 10th Jun, 2010 12:44
Score: 0
Posts: 14
User Since: 14th May 2010
System Score: N/A
Location: N/A
on 10th Jun, 2010 09:22, Maurice Joyce wrote:
It could be - right click on each entry & select PROPERTIES. That will give U details of what it belongs to.

Maurice, followed your instructions, but what happens is this:-
After clicking on Run as Administrator, a black box appears titled c:\windows\system32> This title is also in the box so I type dir after the > then click enter and a long list appears (from v to z as previously mentioned). right clicking on any of them does not produce a Properties option, just the normal copy etc.
Was this reply relevant?
+0
-0
Maurice Joyce RE: End of life Security warning
Handling Contributor 10th Jun, 2010 15:51
Score: 11610
Posts: 8,906
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 10th Jun, 2010 15:54
Type these in search one at a time. It should pinpoint where they are:

EPUWAL.control and 2. EPUWAL control.dll

Try a right click delete once spotted. If that does not move them I will recommend a small programme that will.



--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
theloft RE: End of life Security warning
Member 11th Jun, 2010 10:28
Score: 0
Posts: 14
User Since: 14th May 2010
System Score: N/A
Location: N/A
on 10th Jun, 2010 15:51, Maurice Joyce wrote:
Type these in search one at a time. It should pinpoint where they are: EPUWAL.control and 2. EPUWAL control.dll
Try a right click delete once spotted. If that does not move them I will recommend a small programme that will.


OK. Did that and Search found about 6 files which I right-clicked and deleted.
But these were the patch files that I have repeatedly downloaded from Secunia to try and cure the eBay Active X Picture Control file that is the Security Warning. Did another Scan and it is still a Security Threat.
Was this reply relevant?
+0
-0
Maurice Joyce RE: End of life Security warning
Handling Contributor 11th Jun, 2010 10:41
Score: 11610
Posts: 8,906
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 11th Jun, 2010 10:49
OK - PSI gives U the path to where the files are that it has detected as still vulnerable.

What are those paths? If they are on the C drive find them as U have done before & delete them.


I assume U have completed a full PSI rescan?

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
theloft RE: End of life Security warning
Member 11th Jun, 2010 11:02
Score: 0
Posts: 14
User Since: 14th May 2010
System Score: N/A
Location: N/A
on 11th Jun, 2010 10:41, Maurice Joyce wrote:
OK - PSI gives U the path to where the files are that it has detected as still vulnerable. What are those paths? If they are on the C drive find them as U have done before & delete them. I assume U have completed a full PSI rescan?

PSI gives me the same path as you have given me i.e Search - command prompt etc. but this does not reveal this particular file as previously mentoned.
Was this reply relevant?
+0
-0
theloft RE: End of life Security warning
Member 11th Jun, 2010 11:22
Score: 0
Posts: 14
User Since: 14th May 2010
System Score: N/A
Location: N/A
Update - Went to Search again and cmd etc. This time in the black box list of downloaded program files there appears EPUWAL.control.dll and EPUWAL.control.inf . But entering these separately in the Search Box does not locate them. Search cannot find them. Right clicking on them in the cmd box does not produce any delete option. So am still at a loss and YES did full Secunia Scan and it is still showing as a Security Threat.
Was this reply relevant?
+0
-0
Maurice Joyce RE: End of life Security warning
Handling Contributor 11th Jun, 2010 11:23
Score: 11610
Posts: 8,906
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 11th Jun, 2010 11:27
This little beauty will move it. Once U have this programme installed go back to those files right click & select delete on next boot. Reboot & rescan & all should be OK.

REMOVING STUBBORN FILES (INCLUDING ACTIVEX)
*******************************************
This tool has only be tested using the XP OS. It does not work with Windows 7.

Install & retain a magic tool called MoveOnBoot. The programme is registered with PSI so U can track it for vulnerabilities.

The download link is here:
http://www.softwarepatch.com/software/moveonboot.h...

Like any "freebie" programme U install watch out for the "elephant traps" to scan or download other unwanted rubbish on the web page. Look for, & install from this link only on the web page.

File Size
0.5MB

File Name
moveonb.msi

[Click here to Download]


Once installed it works flawlessly in the background giving U the additional option to navigate to ANY FILE (not folder) and, on the RIGHT click of the mouse select DELETE OR MOVE A FILE ON NEXT BOOT.

Revision 1







--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
theloft RE: End of life Security warning
Member 11th Jun, 2010 11:29
Score: 0
Posts: 14
User Since: 14th May 2010
System Score: N/A
Location: N/A
on 11th Jun, 2010 11:23, Maurice Joyce wrote:
Which tab is PSI showing U the vulnerabilty - insecure or secure browsing?

Insecure. I Googled this and found several references to this threat. There is a Secunia webpage here:- http://secunia.com/advisories/35757/
But all it states is that the patch solves the problem. But if I can't extract the patch !!!!
Was this reply relevant?
+0
-0
Maurice Joyce RE: End of life Security warning
Handling Contributor 11th Jun, 2010 11:48
Score: 11610
Posts: 8,906
User Since: 4th Jan 2009
System Score: N/A
Location: UK
I would not worry to much about updating. If U want to use that service in the future Ebay will ask for permission to reinstall the ActiveX.

I would get rid of the vulnerable files using MoveOnBoot which I have given U details on.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
ddmarshall RE: End of life Security warning
Dedicated Contributor 11th Jun, 2010 13:03
Score: 1205
Posts: 956
User Since: 8th Nov 2008
System Score: 98%
Location: UK
Microsoft June updates have set killbits for this ActiveX. So there is no longer any danger from it.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0
theloft RE: End of life Security warning
Member 11th Jun, 2010 13:07
Score: 0
Posts: 14
User Since: 14th May 2010
System Score: N/A
Location: N/A
on 11th Jun, 2010 13:03, ddmarshall wrote:
Microsoft June updates have set killbits for this ActiveX. So there is no longer any danger from it.

Thanks for that, but why is Secunia still showing it as a Security Threat ?
Was this reply relevant?
+0
-0
ddmarshall RE: End of life Security warning
Dedicated Contributor 11th Jun, 2010 13:14
Score: 1205
Posts: 956
User Since: 8th Nov 2008
System Score: 98%
Location: UK
Last edited on 11th Jun, 2010 13:20
It's probably too complicated for them to check interdependencies like this. They mainly look at file versions and check whether there are reported vulnerabilties. Have you tried going to eBay and using the enhanced picture uploader? You should be prompted to do the update.

You can't use right click to delete thing in the command box. You have to use the del command. Look back at Maurice's first post. Enter
del epuwal.control.dll (press enter)
del epuwal.control.inf (press enter)

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+4
-0
theloft RE: End of life Security warning
Member 11th Jun, 2010 16:01
Score: 0
Posts: 14
User Since: 14th May 2010
System Score: N/A
Location: N/A
on 11th Jun, 2010 11:48, Maurice Joyce wrote:
I would not worry to much about updating. If U want to use that service in the future Ebay will ask for permission to reinstall the ActiveX.

I would get rid of the vulnerable files using MoveOnBoot which I have given U details on.

Have downloaded this program but it does not give any instructions for use and there is no Desktop Icon. Any more info as to how to?
Was this reply relevant?
+0
-0
theloft RE: End of life Security warning
Member 11th Jun, 2010 16:02
Score: 0
Posts: 14
User Since: 14th May 2010
System Score: N/A
Location: N/A
Last edited on 11th Jun, 2010 16:04
on 11th Jun, 2010 13:14, ddmarshall wrote:
It's probably too complicated for them to check interdependencies like this. They mainly look at file versions and check whether there are reported vulnerabilties. Have you tried going to eBay and using the enhanced picture uploader? You should be prompted to do the update.

You can't use right click to delete thing in the command box. You have to use the del command. Look back at Maurice's first post. Enter
del epuwal.control.dll (press enter)
del epuwal.control.inf (press enter)



Almost ready to give up ! Followed your instructions and despite the 2 files clearly showing in the list of downloaded program files, when I tried to delete exactly as you show (and Maurice earlier) a message appeared saying "Could not find c:\epuwal.dll same with the inf. file. Downloaded latest version of Adobe Flash Player, then re-scanned with SEC. PSI and now showing 2 insecure programs and 1 end of life. Deleted all but they are still showing.
You 2 guys have been really patient but this cannot go on and on!
Was this reply relevant?
+0
-0
Maurice Joyce RE: End of life Security warning
Handling Contributor 11th Jun, 2010 16:21
Score: 11610
Posts: 8,906
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Using MoveOn Boot.

The programme is now part of your RIGHT click mouse options.

Find those files again. Right click both of them>select DELETE ON BOOT>it will confirm action.

Now reboot>rescan & the problem should be history.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
ddmarshall RE: End of life Security warning
Dedicated Contributor 11th Jun, 2010 16:48
Score: 1205
Posts: 956
User Since: 8th Nov 2008
System Score: 98%
Location: UK
Isn't part of the problem here that the files don't show up in Explorer so he can't right click them?

In the command prompt, before you do the del commands you need to do a
cd c:\windows\downloaded program files
so that the prompt looks like
c:\windows\downloaded program files>

or use
del "c:\windows\downloaded program files\epuwal.control.dll" etc.
make sure you get the spaces right.

Here is a simple progam to do delete on reboot if you cannot get Maurice's to work.
http://technet.microsoft.com/en-us/sysinternals/bb...

The instructions aren't brilliant, so post back if you need more help.



--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0
theloft RE: End of life Security warning
Member 11th Jun, 2010 18:53
Score: 0
Posts: 14
User Since: 14th May 2010
System Score: N/A
Location: N/A
on 11th Jun, 2010 16:21, Maurice Joyce wrote:
Using MoveOn Boot.

The programme is now part of your RIGHT click mouse options.
Find those files again. Right click both of them>select DELETE ON BOOT>it will confirm action. Now reboot>rescan & the problem should be history.

Sorry Mauroce and thanks for your continued patience, but in the cmd box, right click shows no option to Delete on Boot. All I get is a box with Mark = Paste - Select All - Scroll - Find... These are in bold and Copy Enter is in faded.
Was this reply relevant?
+0
-0
theloft RE: End of life Security warning
Member 11th Jun, 2010 19:00
Score: 0
Posts: 14
User Since: 14th May 2010
System Score: N/A
Location: N/A
on 11th Jun, 2010 16:48, ddmarshall wrote:
Isn't part of the problem here that the files don't show up in Explorer so he can't right click them?
In the command prompt, before you do the del commands you need to do a
cd c:\windows\downloaded program files
so that the prompt looks like
c:\windows\downloaded program files>
or use
del "c:\windows\downloaded program files\epuwal.control.dll" etc.
make sure you get the spaces right.
Here is a simple progam to do delete on reboot if you cannot get Maurice's to work.http://technet.microsoft.com/en-us/sysinternals/bb...
The instructions aren't brilliant, so post back if you need more help.


Tried the first suggestion and same as using del. command in the Search Box. In the Black dir box, I just get text stating "unable to locate file epuwal etc." and yet they are visible in the dir.list. I follow all instructions and spacing very carefully, but no go. Might try your 2nd one (technet) to-morrow, but I am fed up with it all at present.
Was this reply relevant?
+0
-0
ddmarshall RE: End of life Security warning
Dedicated Contributor 11th Jun, 2010 21:15
Score: 1205
Posts: 956
User Since: 8th Nov 2008
System Score: 98%
Location: UK
I don't think you will get any further using the movefiles program because you will need to know exactly where the files are, which is the problem we are having. As you are not at risk, the only thing you will accomplish by going on is to get your Secunia score up. If you know someone as old as me who was brought up on the command prompt, you could ask them to have a look.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0
theloft RE: End of life Security warning
Member 12th Jun, 2010 10:22
Score: 0
Posts: 14
User Since: 14th May 2010
System Score: N/A
Location: N/A
on 11th Jun, 2010 21:15, ddmarshall wrote:
I don't think you will get any further using the movefiles program because you will need to know exactly where the files are, which is the problem we are having. As you are not at risk, the only thing you will accomplish by going on is to get your Secunia score up. If you know someone as old as me who was brought up on the command prompt, you could ask them to have a look.

OK. Thanks, I will think on it.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability