|
|
Forum Thread: Updating Microsoft Data Access Components 2.x
You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.
This thread was submitted in the following forum:
Problems and Questions Regarding 3rd Party Programs
| jware5558
| Updating Microsoft Data Access Components 2.x
|
|
|
by jware5558 on 9th Dec, 2008 20:40
|
Posts: 12
User Since: 23rd Feb, 2008
Secunia System Score: N/A
Location: N/A |
Secunia has identified as Microsoft Data Access Components 2.x as insecure on my computer. I have run the patch listed by Secunia several times but it has not removed the problem. The Secunia note states that this problem is usually resolved by running Microsoft Windows updates, which I do religiously (automatic update), but that also has not solved the problem. Can anyone assist? |
|
|
| mapych
| RE: Updating Microsoft Data Access Components 2.x
|
|
|
by mapych on 10th Dec, 2008 13:59
|
Posts: 47
User Since: 27th Nov, 2008
Secunia System Score: N/A
Location: N/A |
If you go to All Threads an make a search with MDAC, you will find out you are not alone with this problem.
You can read the other MDAC threads to see if a solution apply to you.
If not, it would be interesting to tell us which file PSI detects as been outdated.
|
|
|
| jware5558
| RE: Updating Microsoft Data Access Components 2.x
|
|
|
by jware5558 on 12th Dec, 2008 00:36
|
Posts: 12
User Since: 23rd Feb, 2008
Secunia System Score: N/A
Location: N/A |
I looked at the MDAC threads under All Threads but, frankly, I'm a little lost given the amount of technical material in the threads. PSI identied the MDAC 2.x version as 2.81.1117.0. Could you walk me through how to identify the appropriate MDAC that I need to delete and how to do it?
Thanks |
|
|
| mapych
| RE: Updating Microsoft Data Access Components 2.x
|
|
|
by mapych on 12th Dec, 2008 01:13
|
Posts: 47
User Since: 27th Nov, 2008
Secunia System Score: N/A
Location: N/A |
It is true that Windows Updates takes care to update your MDAC files.
Sometimes through a big service pack, sometime through monthly fixes.
If you applied all windows updates, this means that your MDAC files (10-20 DLLs or so) are now at version 2.81.x (if you have Windows XP).
Sometimes, when you install third party applications (not MS), they install DLLs on your PC which are part of MDAC. If these files are copied outside of c:\Windows\System32 or c:\Program Files\Common Files\System, Windows doesn't take care of updating them.
So it would be interesting to know which MDAC file(s) PSI thinks are not uptodate on your machine.
|
|
|
| jware5558
| RE: Updating Microsoft Data Access Components 2.x
|
|
|
by jware5558 on 13th Dec, 2008 05:10
|
Posts: 12
User Since: 23rd Feb, 2008
Secunia System Score: N/A
Location: N/A |
The installation path is c:\i386\msadox.dll. Does that help? |
|
|
| YoKenny
| RE: Updating Microsoft Data Access Components 2.x
|
|
|
by YoKenny on 13th Dec, 2008 07:46
|
Posts: 306
User Since: 23rd Dec, 2007
Secunia System Score: 100%
Location: Ont. , CA |
on 13th Dec, 2008 05:10, jware5558 wrote:
The installation path is c:\i386\msadox.dll. Does that help?
My msadox.dll is 2.81.1132.0 in C:\WINDOWS\ServicePackFiles\i386, C:\WINDOWS\system32\dllcache and C:\WINDOWS\CommonFile\ado only.
--
1. Windows 7, 64bit, 4GB RAM, avast! V5 beta3, Browser Defender™
2. XP Pro SP3, 32bit, 768MB RAM, avast! V4.8 Pro, Browser Defender™
with IE8, MBAM, and WinPatrol PLUS |
|
|
| mapych
| RE: Updating Microsoft Data Access Components 2.x
|
|
|
by mapych on 13th Dec, 2008 17:13
|
Posts: 47
User Since: 27th Nov, 2008
Secunia System Score: N/A
Location: N/A |
on 13th Dec, 2008 05:10, jware5558 wrote:
The installation path is c:\i386\msadox.dll. Does that help?
In this case, the file itself, or the whole directory c:\i386 can be put on the ignore list.
c:\i386 is a windows source installation directory.
This kind of directory never gets updated (normally).
So your msadox.dll file will stay outdated forever.
It is not used/active anyway !
|
|
|
| mapych
| RE: Updating Microsoft Data Access Components 2.x
|
|
|
by mapych on 13th Dec, 2008 18:06
|
Posts: 47
User Since: 27th Nov, 2008
Secunia System Score: N/A
Location: N/A |
on 13th Dec, 2008 07:46, YoKenny wrote:
My msadox.dll is 2.81.1132.0 in C:\WINDOWS\ServicePackFiles\i386, C:\WINDOWS\system32\dllcache and C:\WINDOWS\CommonFile\ado only.
The first directory has been created by the last Service Pack Installation. It will only be updated the next time MS will publish a service pack.
The second directory contains backup copies of important windows files in case files like the one in the third directory gets deleted.
because your MDAC file versions seems current, I would try first to call windows update, to check if there is really nothing more to update.
then I would reboot, and let PSI do a full scan.
|
|
|
| jware5558
| RE: Updating Microsoft Data Access Components 2.x
|
|
|
by jware5558 on 24th Dec, 2008 01:23
|
Posts: 12
User Since: 23rd Feb, 2008
Secunia System Score: N/A
Location: N/A |
on 13th Dec, 2008 17:13, mapych wrote:
In this case, the file itself, or the whole directory c:\i386 can be put on the ignore list.
c:\i386 is a windows source installation directory.
This kind of directory never gets updated (normally).
So your msadox.dll file will stay outdated forever.
It is not used/active anyway !
|
|
|
| jware5558
| RE: Updating Microsoft Data Access Components 2.x
|
|
|
by jware5558 on 24th Dec, 2008 01:25
|
Posts: 12
User Since: 23rd Feb, 2008
Secunia System Score: N/A
Location: N/A |
So if the directory is inactive and never gets updated anyway, as you indicated in your comment, then I should be able to delete it from PSI and ignore it, correct? I assume it is not a security threat. I still have a question as to why PSI continues to identify this directory file as an insecure file requiring an update (which I have tried numerous time without result)> |
|
|
| jware5558
| RE: Updating Microsoft Data Access Components 2.x
|
|
|
by jware5558 on 24th Dec, 2008 01:26
|
Posts: 12
User Since: 23rd Feb, 2008
Secunia System Score: N/A
Location: N/A |
Please see my comment above to your previous post on this issue.
Thanks |
|
|
| mapych
| RE: Updating Microsoft Data Access Components 2.x
|
|
|
by mapych on 28th Dec, 2008 14:02
|
Posts: 47
User Since: 27th Nov, 2008
Secunia System Score: N/A
Location: N/A |
on 24th Dec, 2008 01:25, jware5558 wrote:
So if the directory is inactive and never gets updated anyway, as you indicated in your comment, then I should be able to delete it from PSI and ignore it, correct? I assume it is not a security threat.
This i386 directory is useful if you want to add some rarely used windows component after the initial installation (IIS, etc). it can be useful to build a BartPE recovery CD too.
But apart of that you could put it in the PSI ignore list.
If you want to be on the secure side, you could burn a CD with the i386 directory, and then delete this i386 directory.
If Windows really needs something from there you will be able to give the path to the CD-ROM then.
on 24th Dec, 2008 01:25, jware5558 wrote:
I still have a question as to why PSI continues to identify this directory file as an insecure file requiring an update (which I have tried numerous time without result)>
IMO I think it is because the PSI detection algorithm does not take the risk to ignore something which could be in 1% of the case a malign i386 directory (something else which tries to hide inside a i386 named directory).
|
|
|
| jware5558
| RE: Updating Microsoft Data Access Components 2.x
|
|
|
by jware5558 on 1st Jan, 2009 20:39
|
Posts: 12
User Since: 23rd Feb, 2008
Secunia System Score: N/A
Location: N/A |
Thank all who responded to my questions. I have followed your advice and solved my PSI security issues--I now have a 100% PSI security rating. Excellent product and good way to get answers using the forum. Thanks again. |
|
|
|
