|
|
Forum Thread: Download link "wrong"
You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.
This thread was submitted in the following forum:
Problems and Questions Regarding 3rd Party Programs
| rokdd
| Download link "wrong"
|
|
|
by rokdd on 27th Nov, 2008 17:03
|
Posts: 6
User Since: 18th Mar, 2008
Secunia System Score: 98%
Location: N/A |
For Vista the download link windowsupdate.microsoft.com won't work... |
|
|
| mapych
| RE: Download link "wrong"
|
|
|
by mapych on 27th Nov, 2008 22:20
|
Posts: 47
User Since: 27th Nov, 2008
Secunia System Score: N/A
Location: N/A |
I not sure if PSI would be able to call this kind of URL:
%SystemRoot%\system32\wuapp.exe
because the PSI application is some kind of local Web App (which uses IE and Flash as renderer)
|
|
|
| patofa
| RE: Download link "wrong"
|
|
|
by patofa on 4th Dec, 2008 00:43
|
Posts: 1
User Since: 2nd Dec, 2008
Secunia System Score: N/A
Location: N/A |
on 27th Nov, 2008 22:20, mapych wrote:
I not sure if PSI would be able to call this kind of URL:
%SystemRoot%\system32\wuapp.exe
because the PSI application is some kind of local Web App (which uses IE and Flash as renderer)
|
|
|
| louist
| RE: Download link "wrong"
|
|
|
by louist on 6th Dec, 2008 20:29
|
Posts: 3
User Since: 26th Nov, 2008
Secunia System Score: N/A
Location: N/A |
on 27th Nov, 2008 17:03, rokdd wrote:
For Vista the download link windowsupdate.microsoft.com won't work...
I agree. The link returns an error message.
I am seeing this message on two of my three VISTA HOME machines. It does not come up on my Vista Business Edition machine)
All three machines are fully updated via Microsoft Update and the corrective link offered by PSI does not work.
|
|
|
| Patrick.B
| RE: Download link "wrong"
|
|
|
by Patrick.B on 8th Dec, 2008 03:51
|
Posts: 11
User Since: 8th Dec, 2008
Secunia System Score: N/A
Location: N/A |
Yes, the download link is incorrect for Vista machines for two reasons:
1) Windows Update on Vista is a Control Panel Applet and not a Microsoft website
2) I can find no update to my MSXML6.dll v6.20.1099.0 by searching for [msxml] in Microsoft Downloads. I tried a couple and was told they did not apply to my system. Others are for Windows XP, not Vista.
This appears to be a false positive by Secunia's PSI.
Other than this unacknowledged issue, I have found PSI to be great and have recommended it to several friends.
Patrick B.
|
|
|
| louist
| RE: Download link "wrong"
|
|
|
by louist on 9th Dec, 2008 04:20, last edited on 9th Dec, 2008 04:20
|
Posts: 3
User Since: 26th Nov, 2008
Secunia System Score: N/A
Location: N/A |
I agree that PSI is a great utility and I recommend it to others. I am concerned about the potential issue that if the Product is reporting "false positives" many users will eventually stop taking the warnings seriously. |
|
|
| louist
| RE: Download link "wrong"
|
|
|
by louist on 9th Dec, 2008 04:56
|
Posts: 3
User Since: 26th Nov, 2008
Secunia System Score: N/A
Location: N/A |
Interesting: As of this evening. PSI no longer points to that file as "insecure" on my Vista systems. I assume that they updated their database and eliminated what i surmised were false positives. |
|
|
| Patrick.B
| RE: Download link "wrong"
|
|
|
by Patrick.B on 10th Dec, 2008 03:29
|
Posts: 11
User Since: 8th Dec, 2008
Secunia System Score: N/A
Location: N/A |
You are correct. My C:\Windows\system32\MSXML6.DLL v6.20.1099.0 is still in the same spot on my hard drive, but is no longer tagged as Insecure.
OTOH, PSI now finds a backup copy of MSXML6.DLL v6.10.1199.0 on my D: Recovery Drive that it did not find before. I can happily ignore that one.
Thank you Secunia!
Patrick B.
|
|
|
| rrice2
| RE: Download link "wrong"
|
|
|
by rrice2 on 19th Dec, 2008 15:50
|
Posts: 1
User Since: 28th Dec, 2007
Secunia System Score: N/A
Location: N/A |
Hi, I have downloaded Secunia PSI twice this morning and MSXML is still shown as insecure. Any ideas how to get rid of this false positine? |
|
|
| Patrick.B
| RE: Download link "wrong"
|
|
|
by Patrick.B on 20th Dec, 2008 18:42
|
Posts: 11
User Since: 8th Dec, 2008
Secunia System Score: N/A
Location: N/A |
@rrice2
1) You need only download PSI and install it again if there is a new version. Installing PSI multiple times will not change the results.
2) To correct the false positive, you have a few possibilities.
a) It would be considered a false positive if it were a copy of the file that will not get used. For instance, if it is in a recovery partition or if it was in an original installation media folder like "i386", then it is not being used and you can mark it to be ignored.
In PSI, open the [+] sign by the item, then click on the "Ignore Program" link at the bottom to create an ignore rule.
You could also choose to delete the file if you wish.
b) In another case, it would not be a false positive, but a correct report. You may click on the "Online References" at the bottom of that entry to read the Secunia alerts on it. You would want to update that program, uninstall that program, or live with the threat.
c) If it is truly a false positive -- that is, it was misidentified as a threat when it is really safe, then you can discuss it in a thread in this forum and also notify Secunia if you are certain -- if you have reason to believe it is no threat. That is what occurred with MSXML6.dll in Vista. We discussed it in this thread and under "No Updates Available" http://secunia.com/community/forum/thread/show/654...
I wish you safe computing!
Patrick B.
|
|
|
| Jeff1957
| RE: Download link "wrong"
|
|
|
by Jeff1957 on 21st Dec, 2008 16:42
|
Posts: 2
User Since: 12th Jan, 2008
Secunia System Score: N/A
Location: N/A |
Useless to download from microsoft. |
|
|
|
