Secunia
|
|

|
|
|
|
|
|
|
|
|
|
|
|
|
| Jacko24 | Security threats will not clear |
|---|---|
|
20th Dec, 2010 12:23 |
|
Ranking: 0 Posts: 4 User Since: 9th Dec, 2010 System Score: N/A Location: UK Last edited on 20th Dec, 2010 12:24 |
Hi all I have used Secunia PSI for some time and recently have found that security threats are not clearing even after rebooting, clearing the recycle bin, rebooting again, scanning again and so on. Currently am running version PSI v1.5.0.2 on my Windows XP Pro SP 3 machine which is a recent clean re-install. Am currently showing 10 security threats, most are level 4, and 2 are level 5. The threats are: Sun Java JRE 1.5.x / 5.x Adobe Reader 9.x (appears twice and both are cat 5) Apple Safari 5.x (appears twice and both are cat 4) Keepass Password safe 1.x (appear twice and are cat 4) Mozilla Firefox 3.6.x Opera 10.x (appears twice and are cat 4) I know there was a problem before with Adobe Reader constantly showing as a threat regardless of action taken. It appears there are now many more incidences of the same problem. Please, while I still have some hair left, can somebody resolve this problem ? Thanks oodles, in advance. Jim |
| This user no longer exists | RE: Security threats will not clear | ||||||||
|
20th Dec, 2010 12:58 | ||||||||
| Hi, Many of the applications you listed as problematic can be automatically updated by the PSI 2.0 (Which was just released, and is thus no longer beta), and can be had here: http://secunia.com/PSISetup.exe Try re-applying the solutions for each product in the new version. Do you still have problems with any of the products? hope this helps. |
|||||||||
|
|||||||||
| TiMow | RE: Security threats will not clear | ||||||||
|
20th Dec, 2010 13:12 | ||||||||
| Score: 738 Posts: 728 User Since: 26th Jun 2009 System Score: 100% Location: CH |
The above advice may not clear all of these issues as some seem to be old files left behind after updating; and/or old versions installed in non-default locations, i.e. back-up folder/drive. Can you provide full version numbers and installation paths of these insecurities? If not using or familiar with Advanced mode, click "Advanced", top right of PSI window, then OK. These insecure program versions will be found under "Insecure" and possibly "End-of-Life" tabs (look for red lettering). On l.h.s. of each listing, click [+]. This will reveal the requested details. Highlight, copy (Ctrl+C) and paste (Ctrl+V) for each, on your next reply. TiMow -- Computing is not yet a perfect science - it still requires humans. |
||||||||
|
|||||||||
| This user no longer exists | RE: Security threats will not clear | ||||||||
|
20th Dec, 2010 13:22 | ||||||||
| Hi, @TiMow Actually, I was hoping it would - this would seem to be a typical issue with 'zombie files'. And in the PSI 2.0, multiple instances of the same program are detected as one. If all the 'solutions' are applied, hopefully the older versions should be grouped with the up-to-date instance. :) |
|||||||||
|
|||||||||
| TiMow | RE: Security threats will not clear | ||||||||
|
20th Dec, 2010 13:52 | ||||||||
| Score: 738 Posts: 728 User Since: 26th Jun 2009 System Score: 100% Location: CH |
Hi Emil You know the AU better than I, but programs like Safari and Opera always seem to need manual intervention to remove old, insecure versions. Old left over Java usually requires removing from Add/Remove. Maybe coincidence, but there have been a couple of instances recently, where users have old Ff. versions on a back-up drive or part of another program( Erdnt or similar). My (limited) understanding of zombie files was that they just grouped and displayed the information differently, but didn't necessarily remove the old, insecure files. And a last point, was, that, like me, some users prefer not to run and get involved with beta testing, so I was merely offering an alternative course of action, for that scenario. Regards TiMow -- Computing is not yet a perfect science - it still requires humans. |
||||||||
|
|||||||||
| This user no longer exists | RE: Security threats will not clear | ||||||||
|
20th Dec, 2010 14:06 | ||||||||
| Hi, Yes, it is correct that the PSI does not remove any of the zombie files - the PSI would never delete things of a user's harddrive. However, we do try to group zombie files with the main installation, which would make the alert 'stop'. The zombie file would still be present, but for the average user this is not much of a concern. hope this helps. |
|||||||||
|
|||||||||
| Anthony Wells | RE: Security threats will not clear | ||||||||
|
20th Dec, 2010 14:11 | ||||||||
| Score: 2324 Posts: 3,203 User Since: 19th Dec 2007 System Score: N/A Location: N/A |
Hi All , A couple of points :- The 2.0 has just gone non-Beta and in my estimation is a step up from 1.5.0.2 which would be worthwhile to anyone and everyone . I does of course have it's own learning curve , but most of that is handled in the new PSI user manual found on the Dashboard/Learn more . If the (above) files detected (by Jacko) are on a "back up" system or drive , in the 2.0.0. an ignore rule set for a drive maens that it is no longer scanned at all as opposed to being scanned but not displayed in the 1.5.x versions . Hope that helps . Anthony -- It always seems impossible until its done. Nelson Mandela |
||||||||
|
|||||||||
| TiMow | RE: Security threats will not clear | ||||||||
|
20th Dec, 2010 14:20 | ||||||||
| Score: 738 Posts: 728 User Since: 26th Jun 2009 System Score: 100% Location: CH |
Thanks Anthony I stand corrected re. 2.0 beta now being full release. Having re-read Emil's post, he had included this detail -- but I either missed it, or it failed to register. Regards TiMow -- Computing is not yet a perfect science - it still requires humans. |
||||||||
|
|||||||||
| mogs | RE: Security threats will not clear | ||||||||
|
20th Dec, 2010 15:47 | ||||||||
| Score: 2163 Posts: 5,883 User Since: 22nd Apr 2009 System Score: 100% Location: UK |
You gonna be moving on to the new psi 2.0 TiMow ? See it as an early Christmas present? All the fun of unwrapping and familiarizing without the need for additional batteries, and maybe the occasional plug ?! Installed seamlessly....a few secs clipped off the first scan.....one of the indicator dot/circles seems a bit wobbly, but I don't think it's eccentric !! Ha......thankyou very much Secunia !!! -- |
||||||||
|
|||||||||
| TiMow | RE: Security threats will not clear | ||||||||
|
20th Dec, 2010 18:56 | ||||||||
| Score: 738 Posts: 728 User Since: 26th Jun 2009 System Score: 100% Location: CH |
Hi mogs Eventually -- but for now, will sit back and wait a bit - see what occurs. Par example: http://secunia.com/community/forum/thread/show/678... Don't need a pretty wrapped XMas box of hassle. For now, will maintain the Francis Rossi and Rick Parfitt. Regards TiMow -- Computing is not yet a perfect science - it still requires humans. |
||||||||
|
|||||||||
Not a customer already?Learn more about how our market leading Vulnerability Management solutions can help you manage risk and ensure compliance. |