Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: PSI Detects an uninstalled program as being installled.

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Acronis
And, this specific program:
Acronis True Image Home 2009 12.x

This thread has been marked as resolved.
Compumind PSI Detects an uninstalled program as being installled.
Member 26th Oct, 2010 21:00
Ranking: 8
Posts: 54
User Since: 2nd Feb, 2010
System Score: N/A
Location: US
Last edited on 26th Oct, 2010 21:01

Hmm...

I am using PSI 1.5.0.2 and have cleanly uninstalled Acronis True Image Home 2009 and installed Acronis True Image Home 2010, under Win XP Pro, SP3.

PSI shows the 2009 product as being installed when it is not.

Older product uninstalled "cleanly." - The file that the PSI references was created *today* for the new 2010 product, which is detected correctly.

Any ideas on how to correct the PSI detection of the 2009 version, so the PSI can update and report properly, not listing the uninstalled version?

I have rebooted and re-scanned with the PSI without success.

Strange.

TIA :0)

Post "RE: PSI Detects an uninstalled program as being installled." has been selected as an answer.
Maurice Joyce RE: PSI Detects an uninstalled program as being installled.
Handling Contributor 26th Oct, 2010 21:03
Score: 11743
Posts: 9,000
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Where does PSI pinpoint the vulnerability?

FINDING A FILE PATH

ALL PSI VERSIONS EXCEPT VERSION 2 (BETA)


To locate the exact file that the Secunia PSI has detected, use or switch to the ADVANCED interface, then :

1 Click on the + sign of the programme to "expand' it.
2 Click on Technical Details in the Toolbox to see the installation path of the detected file. (Copy (CTRL+C) & paste (CTRL+V) the Installation Path of the file back to the Forum.

PSI VERSION 2 (BETA)

From the DASHBOARD page click on SCAN RESULTS.

1. This will list all your programmes with a + to the left of each one.
2. Click the + sign next to the item that U want help with.
3. This will reveal the path under DETECTED INSTANCES.
4. Highlight it then copy (CTRL+C) then paste (CTRL+V) that path back to the Forum.


Update 7 18:43 02/10/2010

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
Compumind RE: PSI Detects an uninstalled program as being installled.
Member 26th Oct, 2010 21:16
Score: 8
Posts: 54
User Since: 2nd Feb 2010
System Score: N/A
Location: US
Hi Maurice:

Here is the data for the 2009 Program:

C:\Program Files\Acronis\TrueImageHome\AcronisTibUrlHandler.e xe

Note that this file was installed as part of the 2010 program, but the PSI still detects it as being part of the 2009 product.

The Acronis 2010 program has the same path, but a different .exe

Thanks.

Was this reply relevant?
+1
-0
ddmarshall RE: PSI Detects an uninstalled program as being installled.
Dedicated Contributor 26th Oct, 2010 21:19
Score: 1209
Posts: 961
User Since: 8th Nov 2008
System Score: 98%
Location: UK
Last edited on 26th Oct, 2010 21:21
Are you saying you have two versions of Acronis listed or that the 2010 version is being detected as 2009?

Ignore this. Crossed post.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0
Compumind RE: PSI Detects an uninstalled program as being installled.
Member 26th Oct, 2010 21:24
Score: 8
Posts: 54
User Since: 2nd Feb 2010
System Score: N/A
Location: US
Just to clarify...

Two versions are being listed:

Acronis True Image 2010 (Correct, installed.)

Acronis True Image 2009 (Incorrect, uninstalled.)

Tnx.
Was this reply relevant?
+0
-0
Maurice Joyce RE: PSI Detects an uninstalled program as being installled.
Handling Contributor 26th Oct, 2010 21:30
Score: 11743
Posts: 9,000
User Since: 4th Jan 2009
System Score: N/A
Location: UK
I assume it is not being shown as insecure?

Some programmes do show more than one entry in PSI. If U are sure it was downloaded by the 2010 version I suspect Aconis have not changed the file detail hence PSI appear to "have got it wrong".

If it is not insecure I would leave it alone. If U remain concerned I would contact Aconis support. If they have got it slightly wrong they may issue a patch to update that file.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
Compumind RE: PSI Detects an uninstalled program as being installled.
Member 26th Oct, 2010 22:04
Score: 8
Posts: 54
User Since: 2nd Feb 2010
System Score: N/A
Location: US
Last edited on 26th Oct, 2010 22:38
Hi Maurice:

Thanks for your reply!

No, it is not being shown as Insecure. It's a False Positive.

However, as I trust Secunia, they should contact Acronis directly to remedy.

Acronis Technical Support does not go that deep for the end-user. :0(

Perhaps I will place it in the Ignore List, but if it is to be reported properly, Acronis should be contacted by Secunia.

The Product Version of the AcronisTibUrlHandler.exe File is:

12.0.0.9064.

It should be:

13.0.0.7046 (For the 2010 Product Build)

Do you have a USA Telephone for Secunia?

I could help.

Tnx. :0)
Was this reply relevant?
+0
-0
Maurice Joyce RE: PSI Detects an uninstalled program as being installled.
Handling Contributor 26th Oct, 2010 22:50
Score: 11743
Posts: 9,000
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 26th Oct, 2010 22:53
Leave this thread open - I am sure a Secunia Official will read/respond as necessary.

There is a way to check the two .exe file versions.

Navigate to both files PSI has found via Windows Explorer or the Open Folder option in PSI. Right click on both .exe files> select properties>version

The file versions U find should match what PSI is stating. If that is correct it is not a false positive but an error by the vendor.

Is there more than one copy of exactly the same file but different version number? Very doubtful but worth looking.

There is also the possibility that Secunia will look at their rules for that programme & advise U.

Hope this helps.



--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
Compumind RE: PSI Detects an uninstalled program as being installled.
Member 26th Oct, 2010 23:34
Score: 8
Posts: 54
User Since: 2nd Feb 2010
System Score: N/A
Location: US
Last edited on 26th Oct, 2010 23:36
Hi Maurice:

The actual (root cause) problem lies with Acronis.

In my opnion, it is a PSI False Positive in the sense that the PSI thinks that the whole 2009 product is installed, when in reality, it is not.

The PSI is just looking at the file version information and reporting that the actual 2009 program is present. This is not quite the case.

The solution is for Acronis to correct their file version for the above referenced .exe so it conforms to the 2010 product build information.

Then the PSI will be able to discern that the 2009 program has indeed been deleted and update itself.

Acronis has recently released True Image Home 2011 and if they did not change the file information there, it will only be another problem for detection.

Hope this helps!

BTW - You said... "Is there more than one copy of exactly the same file but different version number? Very doubtful but worth looking."

My answer is no. Only one copy of the file in question.
Was this reply relevant?
+0
-0
Maurice Joyce RE: PSI Detects an uninstalled program as being installled.
Handling Contributor 26th Oct, 2010 23:47
Score: 11743
Posts: 9,000
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 26th Oct, 2010 23:48
I agree on the basis they are showing them both as patched. I will be interested in what Secunia say.

Contact details for Secunia are here if still interested:

http://secunia.com/company/contact/

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
Compumind RE: PSI Detects an uninstalled program as being installled.
Member 27th Oct, 2010 00:02
Score: 8
Posts: 54
User Since: 2nd Feb 2010
System Score: N/A
Location: US
Hi:

I took the extra effort and was able to contact a key IT person in the USA with Acronis. The person who I had spoken with is very high level and is going to look into it.

Secunia should too.

Once Acronis and Secunia work on this together, the problem will be on it's way to a quick resolution.

Good luck and thanks.

P.S. I will monitor this thread.
Was this reply relevant?
+0
-0
M.Hansen RE: PSI Detects an uninstalled program as being installled.
Secunia Official 27th Oct, 2010 08:07
Score: 188
Posts: 410
User Since: 26th Jan 2009
System Score: N/A
Location: Copenhagen, DK
Hi

I've done some changes to our detection rules for Acronis True Image 12.x and 13.x

Could I ask you to rescan and see if the problem has been solved?
Compumind RE: PSI Detects an uninstalled program as being installled.
Member 28th Oct, 2010 16:17
Score: 8
Posts: 54
User Since: 2nd Feb 2010
System Score: N/A
Location: US
Hello M. Hansen:

Sorry for my delay in responding to you.

Yes, this *did* resolve the issue!

Now I will be installing Acronis True Image Home 2011 and
Acronis Plus Pack for TIH 2011 and will advise.

I appreciate your actions on this!

Compumind :0)
Was this reply relevant?
+0
-0
Compumind RE: PSI Detects an uninstalled program as being installled.
Member 28th Oct, 2010 17:42
Score: 8
Posts: 54
User Since: 2nd Feb 2010
System Score: N/A
Location: US
Hi M. Hansen:

Acronis True Image Home 2011 is *not* being detected (as installed) by the PSI.

I did not even attempt loading the TIH 2011 Plus Pack yet, as I wanted to do this on a step-by-step basis.

How come that the PSI did not detect it? Rather strange.

I await your reply. Thanks.

Compumind.

Was this reply relevant?
+0
-0
Compumind RE: PSI Detects an uninstalled program as being installled.
Member 29th Oct, 2010 05:54
Score: 8
Posts: 54
User Since: 2nd Feb 2010
System Score: N/A
Location: US
Last edited on 29th Oct, 2010 22:25
M. Hansen:

The Version for True Image Home 2011 is 14.x

The Plus Pack for TIH 2011 is a module which does show up as a separate entity in add/remove programs, under XP - SP3.

That too is not detected.

Kindly advise.

Tnx.
Was this reply relevant?
+0
-0
Compumind RE: PSI Detects an uninstalled program as being installled.
Member 31st Oct, 2010 19:55
Score: 8
Posts: 54
User Since: 2nd Feb 2010
System Score: N/A
Location: US
Hi.

Could someone from Secunia address my posts concerning
the non-detection of Acronis True Image Home 2011 and the related Plus Pack 2011?

Thank you.
Was this reply relevant?
+0
-0
mogs RE: PSI Detects an uninstalled program as being installled.
Expert Contributor 31st Oct, 2010 19:59
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
M. Hansen will probably read thro' the posts in the morning.

--
Was this reply relevant?
+0
-0
E.Jeppesen RE: PSI Detects an uninstalled program as being installled.
Secunia Official 2nd Nov, 2010 12:19
Score: 220
Posts: 618
User Since: 24th Nov 2008
System Score: N/A
Location: Copenhagen, DK
Could you please make a software suggestion for the program that has not been detected? That enables us to add new software and update current detection rules.
Compumind RE: PSI Detects an uninstalled program as being installled.
Member 3rd Nov, 2010 00:33
Score: 8
Posts: 54
User Since: 2nd Feb 2010
System Score: N/A
Location: US
Last edited on 3rd Nov, 2010 00:35
E. Jeppesen:

Suggested - Acronis True Image Home 2011
Suggested - Acronis True Image Home Plus Pack 2011

Done! :0)
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability