navigation bar left navigation bar right

Secunia CSI7
navigation left tab Advisories navigation right tab
navigation left tab Research navigation right tab
navigation left tab Forums navigation right tab
navigation left tab Create Profile navigation right tab
navigation left tab Our Commitment navigation right tab
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Insecure Uninstalled Program

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Google
And, this specific program:
Google Earth 4.x

This thread has been marked as locked.
davidgarside1 Insecure Uninstalled Program
Member 6th Mar, 2011 11:02
Ranking: 0
Posts: 10
User Since: 10th Dec, 2008
System Score: N/A
Location: UK
Secunia PSI reported that Google Earth 4.2 was insecure, so as I don't use it , I uninstalled it. It has now dissapeared from the Windows program list but is still reported as present and insecure by Secunia. If I try a 'Rescan' it starts then locks up. What should I do?

Maurice Joyce RE: Insecure Uninstalled Program
Handling Contributor 6th Mar, 2011 11:08
Score: 11865
Posts: 9,101
User Since: 4th Jan 2009
System Score: N/A
Location: UK
David,
Try shutting down your PC. Wait a few seconds & then switch back on.
Now try a full PSI rescan.

What happens?

We can double check whether Google/Doubleclick programmes have been removed after I know what happens.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
mogs RE: Insecure Uninstalled Program
Expert Contributor 6th Mar, 2011 11:10
Score: 2265
Posts: 6,268
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
Hello.
Have you tried a reboot before a full re-scan....for the change to register ? Or....has Secunia detected a left over file perhaps ?

Finding the file path.

psi versions 1.5.0.1 and 1.5.0.2

Use the Advanced interface...or switch to it ( Simple/ Advanced..top right of psi panel ).

1/. Click on the + sign alongside the programme to expand it.
2/. Click again on Tech Details in the Toolbox to confirm the installation path of the detected file/prog. 3/.Post the Installation Path back to the forum if you are uncertain how best to proceed.

psi version 2.0

Go to Results from the Dashboard


1/. Click on the + sign alongside the file.
2/. This will reveal the file path.
3/. Post the info back to the forum if uncertain how best to proceed.

What version of psi are you using ?

--
Was this reply relevant?
+1
-0
Maurice Joyce RE: Insecure Uninstalled Program
Handling Contributor 6th Mar, 2011 23:08
Score: 11865
Posts: 9,101
User Since: 4th Jan 2009
System Score: N/A
Location: UK
David,
Are U up & running or do U require more help?

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
davidgarside1 RE: Insecure Uninstalled Program
Member 7th Mar, 2011 10:32
Score: 0
Posts: 10
User Since: 10th Dec 2008
System Score: N/A
Location: UK
I tried rebooting as you sugested but same fault.
The path is:
C:\Documents and Settings\jean garside.DAVID\Application Data\
Google\Google Earth\googleearth.exe,version4.2.205.5730

I am using Secunia PSI 2.0
Regards,
David Garside.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Insecure Uninstalled Program
Handling Contributor 7th Mar, 2011 10:39
Score: 11865
Posts: 9,101
User Since: 4th Jan 2009
System Score: N/A
Location: UK
DELETING A FILE OR FOLDER USING PSI VERSION 2

To delete a vulnerable file or folder found by PSI try this:

1. Open PSI>Scan results.

2. Against the programme marked as vulnerable is a + sign to the left of it.

3. Click that & it will reveal DETECTED INSTANCES.

4. Below that are two yellow folders. Click the one WITHOUT a red dot.

5. That will open Windows Explorer & U will be able to see the vulnerable file or folder.
C:\Documents and Settings\jean garside.DAVID\Application Data\
Google\Google Earth\googleearth.exe,version4.2.205.5730


6. Right click on it & select delete.

7. Carry out a full PSI scan & all should be in order.


Original 20:06 22/02/2011


--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
davidgarside1 RE: Insecure Uninstalled Program
Member 7th Mar, 2011 11:28
Score: 0
Posts: 10
User Since: 10th Dec 2008
System Score: N/A
Location: UK
Sorry, nothing happens when I click the yellow folder apart from it being outlined with dots.?
Was this reply relevant?
+0
-0
Maurice Joyce RE: Insecure Uninstalled Program
Handling Contributor 7th Mar, 2011 11:35
Score: 11865
Posts: 9,101
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Something a bit wrong there.

An alternative is to manually navigate to here:

C:\Documents and Settings\jean garside.DAVID\Application Data\
Google\Google Earth\googleearth.exe,version4.2.205.5730

Right click & select delete then complete a full PSI rescan.

If U require more detailed information on how to navigate I need to know which Operating System U are using.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
davidgarside1 RE: Insecure Uninstalled Program
Member 7th Mar, 2011 17:18
Score: 0
Posts: 10
User Since: 10th Dec 2008
System Score: N/A
Location: UK
Yes thanks, I need more information on how to navigate to the flle.
I am using Windows XP.
Regards.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Insecure Uninstalled Program
Handling Contributor 7th Mar, 2011 17:40
Score: 11865
Posts: 9,101
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Right click on START>select ALL USERS>click on the + sign on the left of MY COMPUTER>click on the + sign to the left of C drive>click the + sign to the left of DOCUMENTS & SETTINGS>
now look for
jean garside.DAVID\Application Data\Google\Google Earth\googleearth.exe,version4.2.205.5730

Right click & delete then a full PSI scan.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
davidgarside1 RE: Insecure Uninstalled Program
Member 7th Mar, 2011 18:44
Score: 0
Posts: 10
User Since: 10th Dec 2008
System Score: N/A
Location: UK
I navigated DOCUMENTS & SETTINGS, as you suggested but could not see the
file. There is one called:
jean garside.DAVID
but on trying to open it ,I get an ACCESS DENIED message.
Sorry to be a pain.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Insecure Uninstalled Program
Handling Contributor 7th Mar, 2011 18:46
Score: 11865
Posts: 9,101
User Since: 4th Jan 2009
System Score: N/A
Location: UK
U are not being a pain at all.

Find that file again. Right click & select RENAME. ADD this to the end of that file _OLD

Now rescan.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
davidgarside1 RE: Insecure Uninstalled Program
Member 7th Mar, 2011 19:05
Score: 0
Posts: 10
User Since: 10th Dec 2008
System Score: N/A
Location: UK
I tried to rename the file but got:
Unable to Rename Access Denied message.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Insecure Uninstalled Program
Handling Contributor 7th Mar, 2011 20:51
Score: 11865
Posts: 9,101
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Have U got more than one account on the PC? U need to be logged in with admin rights to make some adjustments.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0

WickedGirl

RE: Insecure Uninstalled Program
[+]
This reply has been minimised due to a negative Relevancy Score.
davidgarside1 RE: Insecure Uninstalled Program
Member 8th Mar, 2011 17:50
Score: 0
Posts: 10
User Since: 10th Dec 2008
System Score: N/A
Location: UK
Yes I have 2 accounts,and I have set them both to Administrator status. When I access the file from the other account (jean garside) and try to rename as you
suggested, I get a message saying ' this is a Windows file and cannot be deleted or renamed.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Insecure Uninstalled Program
Handling Contributor 8th Mar, 2011 18:03
Score: 11865
Posts: 9,101
User Since: 4th Jan 2009
System Score: N/A
Location: UK
OK - then I do not think U have found the correct file.

U are looking for this

jean garside.DAVID\Application Data\Google\Google Earth\googleearth.exe

which is not a system file.

U can also try to find it using search:

Left click Start>Search. At the bottom click on Search Companion>All Files & Folders>copy (CTRL+C) this C:\Documents and Settings\jean garside.DAVID\Application Data\Google\Google Earth\googleearth.exethen paste (CTRL+V) it into the top box.

Make sure it is set to search the C Drive in the bottom box then press Search.

That file should appear in the big white box on completion of the search.

Right click it & select delete.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
davidgarside1 RE: Insecure Uninstalled Program
Member 8th Mar, 2011 19:56
Score: 0
Posts: 10
User Since: 10th Dec 2008
System Score: N/A
Location: UK
All OK now. Thanks for your help .
Regards.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


Secunia is a member of FIRST Secunia is a member of EDUcause Secunia is a member of The Open Group Secunia is a member of FS-ISAC
 
Secunia © 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer
follow Secunia on Facebook follow Secunia on Twitter follow Secunia on LinkedIn follow Secunia on YouTube follow Secunia Xing follow Secunias RSS feed follow Secunia on Google+