Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Up to date program reported as insecure

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
curajong21 Up to date program reported as insecure
Member 14th Oct, 2010 05:57
Ranking: 0
Posts: 2
User Since: 23rd Oct, 2009
System Score: N/A
Location: N/A
I run Secunia version 1.5 on a windows XP standalone PC.

Secunia scans advise Avast Free anti-virus 5.x as insecure, requiring updating. I do not see how this can be, as I update the Avast program and virus definitions every day daily from the vendor's website.

Anyone know what is going on here?

Thank you.

Regards,

currajong21

Leendert Kip RE: Up to date program reported as insecure
Member 14th Oct, 2010 06:40
Score: 65
Posts: 520
User Since: 22nd Jan 2009
System Score: 100%
Location: NL
Last edited on 14th Oct, 2010 06:40
on 14th Oct, 2010 05:57, curajong21 wrote:
Avast Free anti-virus 5.x as insecure, requiring updating. I do not see how this can be, as I update the Avast program and virus definitions every day from the vendor's website.

PSI doesn't check the status of the virus definition file but the version of the program. You should check if you have the latest version. Hope this helps.


--
PC: JJ Computer Services
Intel Core I3 2100 3.1Ghz
DDR3 Kingston ValueRam 4GB 1333
Windows 7 Home Premium 64bits SP1
Secunia PSI 3.0.0.9016
Internet Explorer 9
Mozilla Firefox 31NL

Laptop: MSI GT780DX
Intel Core I5-2450
DDR3 RAM 6GB
Windows 7 Home Premium 64bits SP1
Secunia PSI 3.0.0.9016
Internet Explorer 11
Mozilla Firefox 31NL
Was this reply relevant?
+1
-0
thedillpickl RE: Up to date program reported as insecure
Contributor 14th Oct, 2010 06:55
Score: 376
Posts: 872
User Since: 3rd May 2009
System Score: 100%
Location: US
Hi currajong21;

To add to Leendert:

This is the latest version of Avast: http://www.avast.com/release-history .

> Is PSI reporting an older version?
> What version does Avast reports?

on 14th Oct, 2010 05:57, curajong21 wrote:
... I update the Avast program and virus definitions every day daily from the vendor's website. ...

Please note: Updating the definitions is not the same as updating the entire program. The definitions may be added to the list by Avast anytime they develop a way to detect a new virus or other malware. Also, a program update will change the version number.


Regards;

Fred

--
XP Home
Chrome, Firefox, IE8
--
consilio et animis
Was this reply relevant?
+1
-0
currajong21 RE: Up to date program reported as insecure
Member 14th Oct, 2010 08:01
Score: 0
Posts: 3
User Since: 13th Oct 2010
System Score: N/A
Location: AU
Hello Fred,
Thank you for your input.
The installed version of Avast on my PC is 5.0.677.This is the current version at current date according to the vendor's website.
The version reported by Secunia is 5.0.594 and it references the correct drive/directory.

So, what do we have here?

Thank you.

currajong21
Was this reply relevant?
+0
-0
TiMow RE: Up to date program reported as insecure
Dedicated Contributor 14th Oct, 2010 09:33
Score: 737
Posts: 728
User Since: 26th Jun 2009
System Score: N/A
Location: CH
Hi, Fred's probably turned in for the night - continental time differences.

It could be that you have 2 file instances of Avast - the current version, plus the old version, which PSI is still correctly detecting as insecure.

I don't use Avast, and am unfamiliar with how it updates, but with some programs, the old version is not always removed/overwritten with the new one.

In PSI Advanced, firstly confirm that the latest version is present in Patched tab - if there, then expand by clicking [+] on l.h.s. to view installation path.
Is this the same as the old version, in the Insecure tab? - if so again click [+] by the insecure version and click the Open Folder icon - this takes you to the file location in Windows Explorer.

Are both version numbers present here? - if they are, you should consider deleting the old one (goes to recycle bin and can be restored if necessary)

If you have any concerns, or if the above isn't accurate, then post back and include installation paths for current and insecure versions.

Alternatively, if this course of action works, then re-boot and re-scan PSI to check that changes are recognised.

TiMow

--
Computing is not yet a perfect science - it still requires humans.
Was this reply relevant?
+2
-0
thedillpickl RE: Up to date program reported as insecure
Contributor 14th Oct, 2010 21:44
Score: 376
Posts: 872
User Since: 3rd May 2009
System Score: 100%
Location: US
Hi currajong21;

TiMow is pointing the same way I was going. The problem is almost certainly some files Avast left behind. Please post with results.


Fred

p.s. Hi TiMow :)

--
XP Home
Chrome, Firefox, IE8
--
consilio et animis
Was this reply relevant?
+0
-0
currajong21 RE: Up to date program reported as insecure
Member 15th Oct, 2010 00:01
Score: 0
Posts: 3
User Since: 13th Oct 2010
System Score: N/A
Location: AU
Hello thedillpickl et al,

Thank you for your input. Yes, I had forgotten that there were two versions of Avast - installed on different drives. I have now deleted the older version (which was not running), rebooted, rescanned with Secunia PSI, and Avast has disappeared from the list of insecure programs.

Thanks and regards,

currajong21.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability