Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Security threats will not clear

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as resolved.
Jacko24 Security threats will not clear
Member 20th Dec, 2010 12:23
Ranking: 0
Posts: 4
User Since: 9th Dec, 2010
System Score: N/A
Location: UK
Last edited on 20th Dec, 2010 12:24

Hi all

I have used Secunia PSI for some time and recently have found that security threats are not clearing even after rebooting, clearing the recycle bin, rebooting again, scanning again and so on.

Currently am running version PSI v1.5.0.2 on my Windows XP Pro SP 3 machine which is a recent clean re-install.

Am currently showing 10 security threats, most are level 4, and 2 are level 5. The threats are:
Sun Java JRE 1.5.x / 5.x
Adobe Reader 9.x (appears twice and both are cat 5)
Apple Safari 5.x (appears twice and both are cat 4)
Keepass Password safe 1.x (appear twice and are cat 4)
Mozilla Firefox 3.6.x
Opera 10.x (appears twice and are cat 4)

I know there was a problem before with Adobe Reader constantly showing as a threat regardless of action taken. It appears there are now many more incidences of the same problem.

Please, while I still have some hair left, can somebody resolve this problem ?

Thanks oodles, in advance.

Jim

Post "RE: Security threats will not clear" has been selected as an answer.
This user no longer exists RE: Security threats will not clear
Member 20th Dec, 2010 12:58
Hi,

Many of the applications you listed as problematic can be automatically updated by the PSI 2.0 (Which was just released, and is thus no longer beta), and can be had here: http://secunia.com/PSISetup.exe

Try re-applying the solutions for each product in the new version. Do you still have problems with any of the products?

hope this helps.
Was this reply relevant?
+0
-0
TiMow RE: Security threats will not clear
Dedicated Contributor 20th Dec, 2010 13:12
Score: 737
Posts: 728
User Since: 26th Jun 2009
System Score: N/A
Location: CH
The above advice may not clear all of these issues as some seem to be old files left behind after updating; and/or old versions installed in non-default locations, i.e. back-up folder/drive.

Can you provide full version numbers and installation paths of these insecurities?

If not using or familiar with Advanced mode, click "Advanced", top right of PSI window, then OK.
These insecure program versions will be found under "Insecure" and possibly "End-of-Life" tabs (look for red lettering).

On l.h.s. of each listing, click [+]. This will reveal the requested details.
Highlight, copy (Ctrl+C) and paste (Ctrl+V) for each, on your next reply.

TiMow

--
Computing is not yet a perfect science - it still requires humans.
Was this reply relevant?
+1
-0
This user no longer exists RE: Security threats will not clear
Member 20th Dec, 2010 13:22
Hi,

@TiMow
Actually, I was hoping it would - this would seem to be a typical issue with 'zombie files'.

And in the PSI 2.0, multiple instances of the same program are detected as one. If all the 'solutions' are applied, hopefully the older versions should be grouped with the up-to-date instance. :)

Was this reply relevant?
+0
-0
TiMow RE: Security threats will not clear
Dedicated Contributor 20th Dec, 2010 13:52
Score: 737
Posts: 728
User Since: 26th Jun 2009
System Score: N/A
Location: CH
Hi Emil

You know the AU better than I, but programs like Safari and Opera always seem to need manual intervention to remove old, insecure versions. Old left over Java usually requires removing from Add/Remove. Maybe coincidence, but there have been a couple of instances recently, where users have old Ff. versions on a back-up drive or part of another program( Erdnt or similar).
My (limited) understanding of zombie files was that they just grouped and displayed the information differently, but didn't necessarily remove the old, insecure files.

And a last point, was, that, like me, some users prefer not to run and get involved with beta testing, so I was merely offering an alternative course of action, for that scenario.

Regards

TiMow

--
Computing is not yet a perfect science - it still requires humans.
Was this reply relevant?
+1
-0
This user no longer exists RE: Security threats will not clear
Member 20th Dec, 2010 14:06
Hi,

Yes, it is correct that the PSI does not remove any of the zombie files - the PSI would never delete things of a user's harddrive.

However, we do try to group zombie files with the main installation, which would make the alert 'stop'. The zombie file would still be present, but for the average user this is not much of a concern.

hope this helps.
Was this reply relevant?
+0
-0
Anthony Wells RE: Security threats will not clear
Expert Contributor 20th Dec, 2010 14:11
Score: 2445
Posts: 3,337
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi All ,


A couple of points :-

The 2.0 has just gone non-Beta and in my estimation is a step up from 1.5.0.2 which would be worthwhile to anyone and everyone . I does of course have it's own learning curve , but most of that is handled in the new PSI user manual found on the Dashboard/Learn more .

If the (above) files detected (by Jacko) are on a "back up" system or drive , in the 2.0.0. an ignore rule set for a drive maens that it is no longer scanned at all as opposed to being scanned but not displayed in the 1.5.x versions .

Hope that helps .

Anthony


--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+1
-0
TiMow RE: Security threats will not clear
Dedicated Contributor 20th Dec, 2010 14:20
Score: 737
Posts: 728
User Since: 26th Jun 2009
System Score: N/A
Location: CH
Thanks Anthony
I stand corrected re. 2.0 beta now being full release. Having re-read Emil's post, he had included this detail -- but I either missed it, or it failed to register.
Regards
TiMow

--
Computing is not yet a perfect science - it still requires humans.
Was this reply relevant?
+0
-0
mogs RE: Security threats will not clear
Expert Contributor 20th Dec, 2010 15:47
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
You gonna be moving on to the new psi 2.0 TiMow ? See it as an early Christmas present? All the fun of unwrapping and familiarizing without the need for additional batteries, and maybe the occasional plug ?!
Installed seamlessly....a few secs clipped off the first scan.....one of the indicator dot/circles seems a bit wobbly, but I don't think it's eccentric !! Ha......thankyou very much Secunia !!!

--
Was this reply relevant?
+0
-0
TiMow RE: Security threats will not clear
Dedicated Contributor 20th Dec, 2010 18:56
Score: 737
Posts: 728
User Since: 26th Jun 2009
System Score: N/A
Location: CH
Hi mogs
Eventually -- but for now, will sit back and wait a bit - see what occurs.
Par example:

http://secunia.com/community/forum/thread/show/678...

Don't need a pretty wrapped XMas box of hassle.
For now, will maintain the Francis Rossi and Rick Parfitt.
Regards
TiMow

--
Computing is not yet a perfect science - it still requires humans.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer