Belarc Advisor / Missing Security Updates in Security http://www.dslreports.com/forum/r19291013 en Fri, 04 Dec 2009 04:32:13 EDT Fri, 04 Dec 2009 04:32:13 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19302660 pudelein : I can now confirm that one route through which capicom.dll can sneak into the system32 folder and remain there till found is via Symantec software. The copy that I had (version 2.0.0.3) was created 01/08/2004, modified 01/02/2004, last accessed 11/15/2005. I used Norton Antivirus until about August 2005. On 01/08/2004, Symantec LiveUpdate downloaded an update to LiveReg, one of the Norton components. The copy of capicom.dll was certainly delivered at that time. There could possibly have been a copy of an earlier version before that, but version 2.0.0.3 already existed in early 2003, as shown by the copy of capicom.dll that accompanied my HP printer software. I am sure there are other vectors also. Symantec should not have stored the thing in system32; it should have been in a private folder where it could be removed by an uninstaller. Just junk programming, I guess!]]> http://www.dslreports.com/forum/remark,19302660 Mon, 22 Oct 2007 09:36:12 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19298900 dolphins : Aha!

Thanks for the rerun, my memory isn't what it used to be. :)]]> http://www.dslreports.com/forum/remark,19298900 Sun, 21 Oct 2007 16:15:35 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19298695 Exidor :
said by dolphins See Profile :

Thanks for that rerun of 2004. ;) I will check into this more tomorrow because I believe Norton 90 day trial came with this machine?
Here's a rerun from the summer of '06: ;)

»Re: [POLL] Spyware Programs - 2006 Members Choice

Some would say Norton can hose your system in 90 minutes, never mind 90 days or 60 days. :p

(not that I would know anything about that)]]> http://www.dslreports.com/forum/remark,19298695 Sun, 21 Oct 2007 15:22:44 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19296556 Mele20 :
said by AB See Profile :

said by dolphins See Profile :

I remember the days when those 2 were top of the heap, king of the hill, "A" number one. :huh:
That's right. Things change.
And it all started with Symantec firing all their USA techs and moving to DRM.
--
"The same ferocity that our founders devoted to protect the freedom and independence of the press is now appropriate for our defense of the freedom of the internet. The stakes are the same: the survival of our Republic". Al Gore, The Assault on Reason]]> http://www.dslreports.com/forum/remark,19296556 Sun, 21 Oct 2007 01:23:26 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19296450 AB :
said by dolphins See Profile :

I remember the days when those 2 were top of the heap, king of the hill, "A" number one. :huh:
That's right. Things change.]]> http://www.dslreports.com/forum/remark,19296450 Sun, 21 Oct 2007 00:51:40 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19296444 dolphins : I remember the days when those 2 were top of the heap, king of the hill, "A" number one. :huh:
--
Prevent Malware]]> http://www.dslreports.com/forum/remark,19296444 Sun, 21 Oct 2007 00:48:59 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19296390 AB :
said by dolphins See Profile :

. . Thanks for that rerun of 2004. ;) I will check into this more tomorrow because I believe Norton 90 day trial came with this machine?

Still the Mcafee episode is eating me up inside. I am currently testing Comcast's free Mcafee Security and I'm almost sure is what caused this?
McAfee, Symantec-- what's the difference? A turd by any other name . . . . ;) :D]]> http://www.dslreports.com/forum/remark,19296390 Sun, 21 Oct 2007 00:32:56 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19296343 dolphins : Out of the mouths of lurkers. :)

Thanks for that rerun of 2004. ;) I will check into this more tomorrow because I believe Norton 90 day trial came with this machine?

Still the Mcafee episode is eating me up inside. I am currently testing Comcast's free Mcafee Security and I'm almost sure is what caused this?
--
Prevent Malware]]> http://www.dslreports.com/forum/remark,19296343 Sun, 21 Oct 2007 00:17:34 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19296257 Exidor : Personally, I'd blame Norton...even if it's not on your system. ;)

This thread on the capicom.dll is a fun read:

»Norton Live Update Issue

Apparently the capicom.dll is a Symantec favorite.

»ftp://ftp.symantec.com/public/english_···adme.htm

If you uninstall Norton Ghost, the capicom.dll file might still appear in the system directory. This is a shared .dll file that is used to perform LiveUpdate for all Symantec products. If you have multiple Symantec products on your computer, or if it is unclear whether the file is needed, it will not be uninstalled.]]> http://www.dslreports.com/forum/remark,19296257 Sat, 20 Oct 2007 23:59:46 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19295998 AB :
said by dolphins See Profile :

. . I'm having a few cocktails right now and I don't want to do anything stupid, like I have in the past e.g. changing administrator password and not remembering it the next day. :o
Sounds like the smart play. It'll still be there tomorrow.

And I'll just mention that I'm running the retail version of XP on this machine, not the OEM version that came with it-- for whatever that's worth.
Not that that has anything to do with setting the killbit, or anything else, necessarily.]]> http://www.dslreports.com/forum/remark,19295998 Sat, 20 Oct 2007 23:02:37 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19295881 dolphins : "Off to the chopping block" is my way of saying goodbye to Capicom.

I'm having a few cocktails right now and I don't want to do anything stupid, like I have in the past e.g. changing administrator password and not remembering it the next day. :o
--
Prevent Malware]]> http://www.dslreports.com/forum/remark,19295881 Sat, 20 Oct 2007 22:37:12 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19295838 AB :
said by dolphins See Profile :

If I don't resolve this soon, It's off to the chopping block. :)
For me, you, or what? ;)

So resolve it. Set that killbit. It's not tough-- just be careful to do it exactly, according to the instructions.

I'm also using a Compaq, btw, and also have an HP printer, yet I don't have that .dll anywhere on my machine.]]> http://www.dslreports.com/forum/remark,19295838 Sat, 20 Oct 2007 22:27:05 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19295783 dolphins :
said by AB See Profile :

You could always not download either of them, and set the killbit in the Registry yourself.
Follow the instructions carefully, and back up that Registry key before changing it.
Just a thought.

'No comment' about which I think you should download and install. ;)
If I don't resolve this soon, It's off to the chopping block. :)
--
Prevent Malware]]> http://www.dslreports.com/forum/remark,19295783 Sat, 20 Oct 2007 22:16:41 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19295774 dolphins : Hmmm... this is a Compaq machine which is owned by HP?

I got to say though, that I'm pretty sure it all started when Mcafee removal tool deleted VBScript runtime and then I had to reinstall it because of some runtime errors.

I'm confused right now. I need to step back and look at this with new eyes tomorrow. ;)
--
Prevent Malware]]> http://www.dslreports.com/forum/remark,19295774 Sat, 20 Oct 2007 22:14:20 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19295720 pudelein : Further to what I said above about WinXP and CAPICOM: one copy of capicom.dll is indeed in system32, but this was not updated by the May update. A second copy is in some of the HP software that came with a printer I bought in 2005; this copy was also not updated in May. The third, however, which was updated is in %ProgramFiles%\Microsoft CAPICOM 2.1.0.2 and this was created on May 9, 2007 by that update. As I said before, I don't actually think any of these have ever actually been executed. I do not do any of the SDK things they are designed for, but then you never know...]]> http://www.dslreports.com/forum/remark,19295720 Sat, 20 Oct 2007 22:02:42 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19295515 AB : You could always not download either of them, and set the killbit in the Registry yourself.
Follow the instructions carefully, and back up that Registry key before changing it.
Just a thought.

'No comment' about which I think you should download and install. ;)]]> http://www.dslreports.com/forum/remark,19295515 Sat, 20 Oct 2007 21:29:21 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19295484 dolphins :
said by pudelein See Profile :

Dolphins,
your statement that CAPICOM is not available for Windows XP is incorrect. I have it on my WinXPSP2 Home system...actually there are three (!) copies of the essential bit, capicom.dll. I am not aware that any of them has been used, but the DLL is there. I got the update KB931906 by automatic updates in the May patch Tuesday 2007 episode.
You right, I got Capicom.dll in system32 folder. Now why does MS have conflicting web pages concerning this?

said by AB See Profile :

You're right, it's one of the May updates. Info about what it is and where it may have come from is here:

»www.microsoft.com/technet/securi···028.mspx

I also have XP Home SP2 and do not have that .dll on my system.

It's not supposed to have anything to do with XP that I can see, other than it may have been included as part of some SDK Redistributable, or perhaps tagged along with some VBS or .NET app.

If the .dll version is 2.1.01 or lower, then the update is necessary.
Ok now which one am I supposed to download... CAPICOM or Platform SDK Redistributable: CAPICOM?
--
Prevent Malware]]> http://www.dslreports.com/forum/remark,19295484 Sat, 20 Oct 2007 21:22:33 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19295295 AB :
said by pudelein See Profile :

Dolphins,
your statement that CAPICOM is not available for Windows XP is incorrect. I have it on my WinXPSP2 Home system...actually there are three (!) copies of the essential bit, capicom.dll. I am not aware that any of them has been used, but the DLL is there. I got the update KB931906 by automatic updates in the May patch Tuesday 2007 episode.
You're right, it's one of the May updates. Info about what it is and where it may have come from is here:

»www.microsoft.com/technet/securi···028.mspx

I also have XP Home SP2 and do not have that .dll on my system.

It's not supposed to have anything to do with XP that I can see, other than it may have been included as part of some SDK Redistributable, or perhaps tagged along with some VBS or .NET app.

If the .dll version is 2.1.01 or lower, then the update is necessary.]]> http://www.dslreports.com/forum/remark,19295295 Sat, 20 Oct 2007 20:48:17 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19294961 pudelein : Dolphins,
your statement that CAPICOM is not available for Windows XP is incorrect. I have it on my WinXPSP2 Home system...actually there are three (!) copies of the essential bit, capicom.dll. I am not aware that any of them has been used, but the DLL is there. I got the update KB931906 by automatic updates in the May patch Tuesday 2007 episode.]]> http://www.dslreports.com/forum/remark,19294961 Sat, 20 Oct 2007 19:19:38 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19292336 Darek : ...or...
there are some left-overs...
some registry keys...
telling Belarc that the software exists..?

:D]]> http://www.dslreports.com/forum/remark,19292336 Sat, 20 Oct 2007 08:36:05 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19292199 Mele20 : I agree with redwolfe_98, contact Belarc. They will want to know about this and they will investigate and issue a new version of Belarc Advisor if needed. I have contacted them several times and the support is very capable, courteous, and prompt.

Just send an email to: support@belarc.com
--
"The same ferocity that our founders devoted to protect the freedom and independence of the press is now appropriate for our defense of the freedom of the internet. The stakes are the same: the survival of our Republic". Al Gore, The Assault on Reason]]> http://www.dslreports.com/forum/remark,19292199 Sat, 20 Oct 2007 07:23:24 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19292056 redwolfe_98 : dolphins, you could contact belarc and ask them about the issue.. it there is a problem on their end, bringing it to their attention could help to straighten it out..]]> http://www.dslreports.com/forum/remark,19292056 Sat, 20 Oct 2007 05:01:41 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19291856 dolphins : XP, regular user.

I should have researched a little more before posting. I know now that Belarc is warning me about a security update for software I do not have on my machine.
--
Prevent Malware]]> http://www.dslreports.com/forum/remark,19291856 Sat, 20 Oct 2007 02:31:41 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19291811 AB : So you're saying that KB901936 is the correct number that Belarc is warning you about?
If so, again, I'd have to say that they have it wrong and Windows Update has it right.

What OS are you running? If you're just a regular user, I can't see where CAPICOM has any use for you.

There's an XML Core Services update, but apparently you already have that if you needed it.

»www.microsoft.com/technet/securi···042.mspx

Belarc is just a tool-- a reference. It's been wrong before.
Whether or not it is this time for you, I don't know-- but it sounds like it may be.
]]> http://www.dslreports.com/forum/remark,19291811 Sat, 20 Oct 2007 02:10:28 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19291732 dolphins :
said by dadkins See Profile :

Got any hidden updates?
No hidden updates.

said by AB See Profile :

This-- KB901936? (Your link wouldn't load for me in Firefox)

»support.microsoft.com/kb/931906

If so, unless you're running BizTalk Server 2004, I'd say Microsoft has it right and Belarc is in error.
No, I'm not running Biztalk but I read a little about CAPICOM and it may have something to do with when I upgraded Mcafee security? When un-installed the older version using Mcafee's removal tool, it removed VBScript runtime and I had to reinstall it. It was right around the same time the Belarc started warning me?

Edit: I should have read further, Capicom is not available in XP
--
Prevent Malware]]> http://www.dslreports.com/forum/remark,19291732 Sat, 20 Oct 2007 01:44:42 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19291611 AB : This-- KB901936? (Your link wouldn't load for me in Firefox)

»support.microsoft.com/kb/931906

If so, unless you're running BizTalk Server 2004, I'd say Microsoft has it right and Belarc is in error.
]]> http://www.dslreports.com/forum/remark,19291611 Sat, 20 Oct 2007 01:10:55 EDT Re: Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19291409 dadkins : Got any hidden updates?]]> http://www.dslreports.com/forum/remark,19291409 Sat, 20 Oct 2007 00:15:31 EDT Belarc Advisor / Missing Security Updates http://www.dslreports.com/forum/remark,19291013 dolphins : Belarc Advisor shows I'm missing this security update while Windows Update shows no updates available?

Which one is correct?

This happened the last time I updated Belarc Advisor but forgot about it.
--
Prevent Malware]]> http://www.dslreports.com/forum/remark,19291013 Fri, 19 Oct 2007 22:41:46 EDT