 chachazz
Premium Member
join:2003-12-14
kudos:10 ·TELUS
1 edit |
chachazz
Premium Member
2011-Feb-8 6:06 pm
Adobe Shockwave Player 11.5.9.620 security updateWeb Player (Shockwave) Downloads - all systems: » www.adobe.com/shockwave/ ··· ernates/No release notes to be found yet. |
|
chachazz
1 edit |
chachazz
Premium Member
2011-Feb-8 6:19 pm
Re: Adobe Shockwave Player 11.5.9.620Security Advisory/Bulletin now posted @ PSIRT: Update available for Adobe Shockwave Player (APSB11-01) February 8, 2011 A Security Bulletin (APSB11-01) was posted today addressing critical security issues in Adobe Shockwave Player. Adobe recommends users of Adobe Shockwave Player 11.5.9.615 and earlier versions update to Adobe Shockwave Player 11.5.9.620 using the instructions provided in the Security Bulletin. Details @ Adobe PSIRT: » blogs.adobe.com/psirt/20 ··· -01.html--
Gladiator Security Forum: www.gladiator-antivirus.com/
|
|
 Triple HelixTroll Hunter
Premium Member
join:2007-07-26
Oshawa, ON
kudos:7 |
to chachazz
Re: Adobe Shockwave Player 11.5.9.620 security updateThanks chachazz again for the update! TH  |
|
 Littlem129
Premium Member
join:2007-05-13
White Pine, TN |
to chachazz
Got it...Thanks chachazz .  |
|
 Dustyn
Premium Member
join:2003-02-26
Ontario, CAN
kudos:13 ·TekSavvy Cable
·Rogers Hi-Speed
1 edit |
to chachazz
Dustyn's |
Thanks for the update! Why is the date format in your screen shot below (for the slim version) indicate that this was released in the future? 08/02/2011 Looks like August 02, 2011.  http://www.dslreports.com/r0/download/1625765~65a2cc59d4fcff1a472b689144819643/Shockwave.png
chachazz
|
|
 CudniLa Merma - Vigilado
MVM
join:2003-12-20
Someshire
kudos:13 |
Cudni
MVM
2011-Feb-9 6:50 pm
said by Dustyn:Thanks for the update!
Why is the date format in your screen shot below (for the slim version) indicate that this was released in the future?
08/02/2011
Future is 2/9/2011 regional time display Cudni --
"what we know we know the same, what we don't know, we don't know it differently."
Help yourself so God can help you.
Microsoft MVP, 2006 - 2010/11 |
|
| |
to chachazz
Thx, updated here! |
|
Libra
Premium Member
join:2003-08-06
USA
kudos:1 |
to chachazz
Thank you. It's now updated.
Sincerely, Libra |
|
 AB
Premium Member
join:2006-04-04
Ecuador
kudos:3 |
to chachazz
At the Shockwave tester page, right-click on the animation, select 'Properties' and get this: 
At every update, they revert back to their default 'checked' state.
I always uncheck all three, personally.
|
|
 antdudeA Ninja Ant
VIP
join:2001-03-25
United State
kudos:5
|
said by AB:At the Shockwave tester page, right-click on the animation, select 'Properties' and get this:
[att=1]
At every update, they revert back to their default 'checked' state.
I always uncheck all three, personally.
How annoying. Thanks for the tips. --
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer |
|
chachazz
Premium Member
join:2003-12-14
kudos:10 ·TELUS
|
chachazz
Premium Member
2011-Feb-10 3:10 pm
said by antdude:said by AB:At the Shockwave tester page, right-click on the animation, select 'Properties' and get this:
[att=1]
At every update, they revert back to their default 'checked' state.
I always uncheck all three, personally.
. How annoying. Thanks for the tips. Settings here are still the same as before update. Here's link to test Shockwave » www.adobe.com/shockwave/welcome/ Thanks AB --
Gladiator Security Forum: www.gladiator-antivirus.com/
|
|
|
 rcdaileyDragoonfly
Premium Member
join:2005-03-29
Rialto, CA |
to chachazz
Re: Adobe Shockwave Player 11.5.9.620Thanks. Got it for both IE and Firefox. |
|
AB
Premium Member
join:2006-04-04
Ecuador
kudos:3 |
to chachazz
Re: Adobe Shockwave Player 11.5.9.620 security updatesaid by chachazz:Settings here are still the same as before update. Hmmm. Interesting. Wish I could say the same. I know for a dead-solid fact I unchecked those after the previous update, yet when I went back again after this one, there they were checked again. And for Flash Player updates, declining the Norton scan or the Google Toolbar also doesn't prevent three or four Google Toolbar files and 'SCC.dll' (a Symantec file) from cropping up in the Flash folder, either. |
|
| |
JLevinworth
Anon
2011-Feb-10 6:42 pm
said by AB:And for Flash Player updates, declining the Norton scan or the Google Toolbar also doesn't prevent three or four Google Toolbar files and 'SCC.dll' (a Symantec file) from cropping up in the Flash folder, either.
I had the same problem that the unchecked bundled preference(s) were ignored. I'm glad you posted. I thought it was just me. I was able to catch it before downloading/installing. When I went to get the flash update (with FF), I unchecked the Norton System Scan (and doing that also removes the Norton part of the "by clicking this you agree to the user agreement" on the screen), but the download exe presented I noticed said something like "flash_with_NSS.exe" so I backed up to try again and got the same thing. Left, cleared cache, came back - same thing. I then went to IE, and had the same problem, but this time it presenting the Google Tool bar. The uncheck had no effect. I ended up manipulating the download url (open in new tab) and removed &i=McAfee_Security_Scan_Plus and/or &d=Google_Toolbar_6.5 and presented me the unadulterated flash.exe version. -Jim |
|
AB
Premium Member
join:2006-04-04
Ecuador
kudos:3 |
AB
Premium Member
2011-Feb-10 7:43 pm
said by JLevinworth :I had the same problem that the unchecked bundled preference(s) were ignored. Just to be clear-- for the Flash Player, I'm not saying that anything I unchecked still got installed, just that the files that would have installed those options still get put into the folder located at WINDOWS/System32/Macromed/Flash (on XP). There's that Norton/Symantec 'SCC.dll' and (as I recall) three files related to Google Toolbar. I'm sure they're inert enough, but I delete them anyway, just on GPs. |
|
| |
JLevinworth
Anon
2011-Feb-10 8:03 pm
said by AB:said by JLevinworth :I had the same problem that the unchecked bundled preference(s) were ignored. Just to be clear-- for the Flash Player, I'm not saying that anything I unchecked still got installed, just that the files that would have installed those options still get put into the folder located at WINDOWS/System32/Macromed/Flash (on XP). There's that Norton/Symantec 'SCC.dll' and (as I recall) three files related to Google Toolbar. I'm sure they're inert enough, but I delete them anyway, just on GPs. Ah ok. I misunderstood that. So those related files (or some of them) were still downloaded for you, but just not installed. I just checked and did not find them on mine, if I did I'd delete them too. |
|
AB
Premium Member
join:2006-04-04
Ecuador
kudos:3 |
AB
Premium Member
2011-Feb-10 9:02 pm
said by JLevinworth :So those related files (or some of them) were still downloaded for you, but just not installed. Exactly. And one more thing of note: I now (once again, as this has also happened before) have a 'Google Toolbar' subkey under HKLM/Software/Google in the registry. (The main 'Google' key is there because I have Google Earth installed.) The 'Google Toolbar' subkey is empty, containing only the standard 'no value set' information. But that key is created right along with those files from the Macromed/Flash folder. I remember deleting it before on other occasions after a Flash install. No 'Symantec' key, though I can recall also having one of those created on previous occasions, and may in fact have one now under HKCU in my Admin. account, which I'm not currently using. But I'll log back into that one later just to check and see. That/those key(s) will be going away, too. All of this business, regarding both Flash and Shockwave, is part of the reason why so many people look askance at those apps. Adobe/Macromedia always seems to be up to something that, while there's room for excuses or 'plausible deniability' on their part, at the same time causes the hairy eyeball that Adobe/Macromedia is sometimes given to be not unjustified. It's a 'low-rent' style of behavior. |
|
| |
to AB
quote:
And for Flash Player updates, declining the Norton scan or the Google Toolbar also doesn't prevent three or four Google Toolbar files and 'SCC.dll' (a Symantec file) from cropping up in the Flash folder, either.
Interesting. I saw no such thing on Win7 64 bit. --
"One Good Conspiracy Deserves Another."
|
|
AB
Premium Member
join:2006-04-04
Ecuador
kudos:3 |
AB
Premium Member
2011-Feb-10 9:49 pm
said by Grail Knight: quote:
And for Flash Player updates, declining the Norton scan or the Google Toolbar also doesn't prevent three or four Google Toolbar files and 'SCC.dll' (a Symantec file) from cropping up in the Flash folder, either.
Interesting. I saw no such thing on Win7 64 bit. I don't think it's unusual for 64-bit users to sometimes experience different behaviors than those of us on 32-bit. Nor for installers to exhibit different behaviors from user to user, for that matter. I can recall several threads where people were saying 'yeah, I saw this', or 'I never saw that'. I dunno. Beats me. |
|
| |
I will have to check into this some more.
A 32bit install of flash should have dumped those files into:
AppData\Roaming\Adobe
That is the folder you are talking about correct?
--
"One Good Conspiracy Deserves Another."
|
|
AB
Premium Member
join:2006-04-04
Ecuador
kudos:3 |
AB
Premium Member
2011-Feb-10 9:58 pm
said by Grail Knight:I will have to check into this some more.
A 32bit install of flash should have dumped those files into:
AppData\Roaming\Adobe
That is the folder you are talking about correct? I don't know where they're put on Win7. I use XP. On XP, I'm talking about a C:/WINDOWS folder. |
|
| |
I will check the wife's computer when I update it tomorrow. She is still using that ancient WinXP. --
"One Good Conspiracy Deserves Another."
|
|
| Grail Knight |
to AB
I will check the wife's computer when I update it tomorrow. She is still using that ancient WinXP. That location should have been this on Win7 Pro (Whoops!): AppData\LocalLow\Adobe\Shockwave Player 11 The application itself is here: \Windows\SysWOW64\Adobe\Shockwave 11 |
|
AB
Premium Member
join:2006-04-04
Ecuador
kudos:3 |
AB
Premium Member
2011-Feb-10 10:15 pm
That sounds closer to the ballpark, though we're talking here now about a Flash install, not a Shockwave install-- thread title notwithstanding. |
|
| |
Ya I copied and pasted the wrong thing.
It happens.
Still back to Flash I will check that install on the desktop pc in the morning and see if it dumps the toolbars even when de-selected.
--
"One Good Conspiracy Deserves Another."
|
|
| |
JLevinworth to AB
Anon
2011-Feb-11 8:38 am
to AB
Adobe Flash Player 10.2.152.26AB, Which, of the few Flash downloads and styles, did you get/use?
I'm using XP, with FF, and not using the Adobe getplus thing to download it (had it once, removed it).
As a note: I have adblock/Noscript (and enabled for Adobe), it doesn't change my result having tested in IE clean, and get the same result.
Some BS going on with this it appears, it be good to confirm.
I'm going to attach another reply with my steps/results.
-Jim |
|
AB
Premium Member
join:2006-04-04
Ecuador
kudos:3 |
AB
Premium Member
2011-Feb-11 10:31 am
said by JLevinworth :AB, Which, of the few Flash downloads and styles, did you get/use?
I'm using XP, with FF, and not using the Adobe getplus thing to download it (had it once, removed it). I got my installers, both Flash and Shockwave, from the FileHippo site. I allow scripts and cookies at Adobe, because when I don't the site tends not to render properly for me with Firefox. I generally only go there to test the players and make settings. The empty Google Toolbar registry entry was the only additional one I got this time around. The added superfluous and unwanted files in the Macromed/Flash folder are something that's become par for the course for me on Flash updates-- just things I know I'll want to remove after the installation. And one more note on the Shockwave installation: During it, my firewall pops up asking if I want to allow a connection to 'stats.norton' or something like that. I said 'no', after which the installation grinds to halt for a minute or so. Then the option box for installing the Norton scan comes up anyway. After saying 'no thanks' to that the installation completes. This is also what I've come to know as par for the course. |
|
| |
to JLevinworth
1. Download offer w/ MSS pre-checked | 
2. Download offer MSS un-checked. | 
3. Presented Download page result Flash+mss_d.exe | 
4. Modified URL Download page result Flash.exe |
As I documented in this post: 1) Screen shot 1: Go to flash download link brings me to here: » get2.adobe.com/flashplayer/Presented with Flash download page pre-checked to include McAfee Security Scan Plus. 2) Screen shot 2: Uncheck McAfee offer (which also clears off the McAfee portion of the UA), Proceed with download. 3) Screen shot 3: Presented with download: flash +mss_d.exe Url goes to: http://get2.adobe.com/flashplayer/completion/?installer=Flash_Player_10.2_for_Windows_-_Other_Browsers&d=McAfee_Security_Scan_Plus&os=XP&browser=Firefox&type=xpi
If I choose to accept the McAfee (as shown in 1), the result is exactly the same. Same download presented. flash +mss_d.exe Tested: cleared cached, entered from the beginning in FF. Did same with IE8 (clean), but instead was offered the Google toolbar version. Same result.. no change in download offered.4) Screen shot 4: If I modify the URL removing the McAfee portion of the offer: &d=McAfee_Security_Scan_PlusTo This: http://get2.adobe.com/flashplayer/completion/?installer=Flash_Player_10.2_for_Windows_-_Other_Browsers&os=XP&browser=Firefox&type=xpi
I get the proper download: flash.exeI sent them both to VirusTotal to get the internal file info: VT result on Flash.exeMD5 : 9585253d0d05e389c7993b155114e0b0
SHA1 : 5111c1c915420964883a0e5be2c3dbbd6f8c9dce
SHA256: e403a604e8b6d158893640ca349f2c78798e334feca60cef9b14df05923046b2
ssdeep: 24576:HUFzg1cYWVN6aGuwdRQAs6WWuf8xzrvSYx4TrLoRd+vB3QbUsVkdC7a:HUxAcYWuaKmWO
8xvKTlvB6BVg
File size : 921024 bytes
First seen: 2011-02-11 13:15:15
Last seen : 2011-02-11 13:15:15
[snip]
sigcheck:
publisher....: Solid State Networks
copyright....: (c) Solid State Networks. All rights reserved.
product......: skinned.launcher
description..: skinned.launcher
original name: launcher.ui.exe
internal name: launcher.ui.exe
file version.: 2.0.11.2
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
VT result on Flash+mss_d.exeMD5 : 7a1df2b0b9fe1975f70ce0c1899ceb55
SHA1 : 4898cf703ac2f3f4b515ee1a91e1f5383a35865b
SHA256 : a61487597dad0b8a3b8dfb3dbb39166e8cd3471f3204aaebd1fa8bbef16811b3
ssdeep: 24576:0UFzg1cYWVN6aGuwdRQAs6WWuf8xzrvSYx8TrLoxdavB3QbUsVkdC7a:0UxAcYWuaKmWO
8xvCTBvB6BVg
File size : 921064 bytes
First seen: 2011-02-11 13:23:13
Last seen : 2011-02-11 13:23:13
[snip]
sigcheck:
publisher....: Solid State Networks
copyright....: (c) Solid State Networks. All rights reserved.
product......: skinned.launcher
description..: skinned.launcher
original name: launcher.ui.exe
internal name: launcher.ui.exe
file version.: 2.0.11.2
comments.....: n/a
signers......: Adobe Systems Incorporated VeriSign Class 3 Code Signing 2010 CA VeriSign Class 3 Public Primary Certification Authority - G5
signing date.: 1:44 AM 2/4/2011
verified.....: -
|
|
| JLevinworth |
JLevinworth to AB
Anon
2011-Feb-11 10:52 am
to AB
said by AB:said by JLevinworth :AB, Which, of the few Flash downloads and styles, did you get/use?
I'm using XP, with FF, and not using the Adobe getplus thing to download it (had it once, removed it). I got my installers, both Flash and Shockwave, from the FileHippo site. AB, Maybe you could upload that .exe to VirusTotal and link the results here. Not to look for virii but to see the internal file name and hash, etc. I have put up that post I mentioned with my info (and also used VT) but it's been sitting in anon hold waiting approval probably because of the image attachments. (Since I can't log-in, it's my lot to wait - Not the Mods). I won't repeat myself here now. Should be soon. |
|
| JLevinworth |
JLevinworth
Anon
2011-Feb-11 10:56 am
Speak of the devil. I've been re-freshing refreshing and now it appears while I drafted. Well, there you go. |
|
·
·
