Avast WEBforum

Other => General Topics => Topic started by: FreewheelinFrank on January 10, 2008, 09:09:01 PM

Title: Fully patched PCs are a rare breed
Post by: FreewheelinFrank on January 10, 2008, 09:09:01 PM
Can't hurt to beat people over the head with this one:

Quote
A small minority of users - as few as one in 20 - is running fully-patched Windows PCs.

Just five per cent of newly-registered users of an online security inspection service Secunia came out with a clean bill of health, while more than 40 per cent have at least 11 insecure applications installed.

The data is based on scans of 20,009 computers whose users recently installed Secunia's freely available software inspection tool. Secunia claims a total user base of more than 200,000 users for its free Secunia PSI tool. A survey of a different sample set of Secunia PSI recently discovered that one in five software apps installed on computers are insecure or out of date.

The Danish security firm said stats from its service show users are struggling to keep their PCs up to date. "Patching a PC is as important as running anti-virus and a personal firewall," said Thomas Kristensen, Secunia's CTO. ®

http://www.theregister.co.uk/2008/01/09/secunia_insecurity_survey/ (http://www.theregister.co.uk/2008/01/09/secunia_insecurity_survey/)
Title: Re: Fully patched PCs are a rare breed
Post by: Rafel on January 10, 2008, 09:54:22 PM
I'm fully patched always  ;D
Title: Re: Fully patched PCs are a rare breed
Post by: micky77 on January 11, 2008, 07:11:57 PM
When I do A thorough scan,Secunia tells me my Thunderbird needs updating to 2.0.0.9. I have 2.0.0.9, if I open Thunderbird and check for updates,I get no updates available.So I'm one of the unpatched ? So maybe their findings are not as accurate as they say !
Title: Re: Fully patched PCs are a rare breed
Post by: .: Mac :. on January 11, 2008, 07:49:04 PM
When I do A thorough scan,Secunia tells me my Thunderbird needs updating to 2.0.0.9. I have 2.0.0.9, if I open Thunderbird and check for updates,I get no updates available.So I'm one of the unpatched ? So maybe their findings are not as accurate as they say !
Maybe some are not accurate, but as many people ive helped out around my neighborhood 1 in 20 sounds about right.

Just last week I reinstalled WIndows on a friends PC  who still has XP SP1 on his machine. SP2 has been out how long now?
Title: Re: Fully patched PCs are a rare breed
Post by: bob3160 on January 12, 2008, 01:02:10 AM
Damien,
Patches are for bluejeans.  ;D Updates are for computers. 
My genes are patched and my computer is fully updated.  :)
Title: Re: Fully patched PCs are a rare breed
Post by: FreewheelinFrank on January 12, 2008, 10:13:23 AM
When I do A thorough scan,Secunia tells me my Thunderbird needs updating to 2.0.0.9. I have 2.0.0.9, if I open Thunderbird and check for updates,I get no updates available.So I'm one of the unpatched ? So maybe their findings are not as accurate as they say !

Do you have a second copy of Thunderbird in another location for some reason?

Does the location given for the out-of-date Thunderbird match the location of the Thunderbird you are using?

Title: Re: Fully patched PCs are a rare breed
Post by: micky77 on January 12, 2008, 01:29:10 PM
Can't quite work this one out, Secunia tells me my version Thunderbird 2.x is out of date,yet when I do the same scan using the sandboxed browser it says my version 2.0.0.9 is upto date.Weird.Not to worry though,its probably some blip on my computer.I actually use thunderbird with DropMyRights while sandboxed  ;D maybe thats confusing Secunia.I confuse myself sometimes
Title: Re: Fully patched PCs are a rare breed
Post by: Abraxas on January 12, 2008, 04:37:29 PM
FreewheelinFrank:
Quote
Can't hurt to beat people over the head with this one
I'm sure those stats are pretty close to the truth . Most PC users just wanna use their PC , not do a lot of updating . The more I suggest to people about the dangers online the less people listen , sad but true I'm afraid  ::)
Title: Re: Fully patched PCs are a rare breed
Post by: Lisandro on January 12, 2008, 07:15:31 PM
Weird.
Secunia informs the path of the non-patched file. Which is it?

Not to worry though,its probably some blip on my computer.I actually use thunderbird with DropMyRights while sandboxed  ;D
I don't think so. Secunia won't detect this situation.
Title: Re: Fully patched PCs are a rare breed
Post by: micky77 on January 13, 2008, 11:04:14 AM
Installed on Your System in:
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
Title: Re: Fully patched PCs are a rare breed
Post by: Lisandro on January 13, 2008, 01:13:43 PM
Installed on Your System in:
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
Ok, strange... is it in English or other language? Even so, seems a bad detection.
I have this in the past, not anymore. I have both XP and Vista systems with Thunderbird installed and not a problem with Secunia. Maybe you could run the Thunderbird setup.exe file again and repair the installation...
Title: Re: Fully patched PCs are a rare breed
Post by: micky77 on January 13, 2008, 02:30:10 PM
Installed on Your System in:
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
Ok, strange... is it in English or other language? Even so, seems a bad detection.
I have this in the past, not anymore. I have both XP and Vista systems with Thunderbird installed and not a problem with Secunia. Maybe you could run the Thunderbird setup.exe file again and repair the installation...
Thanks, I will wait untill next thunderbird update,and see  if that rectifies the matter.I emailed Secunia,they might get back to me. :)
Title: Re: Fully patched PCs are a rare breed
Post by: Lisandro on January 13, 2008, 03:36:34 PM
I emailed Secunia, they might get back to me. :)
Ok. Please, post back. It's always good to solve a mystery 8)
Title: Re: Fully patched PCs are a rare breed
Post by: Dwarden on January 15, 2008, 04:00:52 AM
there is some irk with PSI ... sometimes custom rescan / realtime monitor fails to accept You updated 'insecure' application

usually this is resolved in full scan
Title: Re: Fully patched PCs are a rare breed
Post by: YLAP on January 15, 2008, 11:33:09 AM
Tring to keep my box up to date as possible, but sometimes it's hard to do. Windows are kept up to date, but other programs sometimes not.
Title: Re: Fully patched PCs are a rare breed
Post by: FreewheelinFrank on January 16, 2008, 09:05:50 AM
New tool identifies security patches needed:

http://www.f-secure.com/healthcheck/ (http://www.f-secure.com/healthcheck/)
Title: Re: Fully patched PCs are a rare breed
Post by: Lisandro on January 16, 2008, 05:59:18 PM
New tool identifies security patches needed:
http://www.f-secure.com/healthcheck/ (http://www.f-secure.com/healthcheck/)
Seems good... but unfortunately requires IE.
Title: Re: Fully patched PCs are a rare breed
Post by: vartismz on January 16, 2008, 07:25:42 PM
my windows xp sp2 is fully patch [this is what the microsoft update site says " no available updates for....] any suggestions with the SP3 that microsoft is offering?
Title: Re: Fully patched PCs are a rare breed
Post by: Lisandro on January 16, 2008, 07:27:46 PM
any suggestions with the SP3 that microsoft is offering?
Bob posted something related to SP3 in forums...
Title: Re: Fully patched PCs are a rare breed
Post by: vartismz on January 16, 2008, 07:31:50 PM
ok tech i'll go check it out... am just about to download the stanalone sp3, but i really need to hear from you guys before i hit the download button thanx again...
Title: Re: Fully patched PCs are a rare breed
Post by: FreewheelinFrank on January 16, 2008, 08:09:37 PM
Quote
Seems good... but unfortunately requires IE.

Not really a problem as the tool checks Windows for possibly insecure Windows applications using an integral Windows program.  ::)

I kinda like the way Ubuntu checks every morning for new updates while I'm drinking my Assam with milk and sugar, and it doesn't need IE.  ;D

Quote
my windows xp sp2 is fully patch

Nowadays, malware looks for non-MS applications to exploit, for example Sun Java and Quicktime.
Computer users need an easy way to check everything is up-to-date on their PC: for Windows users, that means more than MS, which is why the Secunia and F-Secure tools are so valuable.
Title: Re: Fully patched PCs are a rare breed
Post by: Lisandro on January 16, 2008, 08:18:41 PM
Seems good...
Tried twice. Install the ActiveX... no report is shown at the end :P

any suggestions with the SP3 that microsoft is offering?
IMHO, better wait the final release. Although Bob says his experience is good, safe and stable.
Title: Re: Fully patched PCs are a rare breed
Post by: bob3160 on January 17, 2008, 03:09:17 AM
Sorry I've been away all day.  You'll find my post about the latest SP3 at:
http://forum.avast.com/index.php?topic=19387.msg270733#msg270733 (http://forum.avast.com/index.php?topic=19387.msg270733#msg270733)
Title: Re: Fully patched PCs are a rare breed
Post by: neal62 on January 17, 2008, 08:08:08 AM
It's not hard to keep a PC with Windows fully patched. I find it quite easy.  ;)
Title: Re: Fully patched PCs are a rare breed
Post by: FreewheelinFrank on January 17, 2008, 11:16:11 AM
I think the fact that infected sites are employing multiple exploits for both Windows and non-Windows software suggests that malware writers are hoping that a percentage of visitors won't have found it so easy to keep their machines fully patched.

http://forum.avast.com/index.php?topic=32619.0 (http://forum.avast.com/index.php?topic=32619.0)

Unless you happen to browse security sites everyday looking for news of security patches, it's easy to miss updates for applications like Java and Quicktime. I think the number of Virtumonde infections reported here recently (Virtumonde installs via vulnerabilities in third-party software) indicates that a significant number of people are finding it difficult to keep their machines fully patched.

That's why I posted this link, and also post links to tools to check for security risks, such as Secunia Software Inspector (http://secunia.com/software_inspector/) and now F-Secure HealthCheck:

http://forum.avast.com/index.php?topic=32720.0 (http://forum.avast.com/index.php?topic=32720.0)

I hope that, armed with this information, visitors to these pages will find it easy to keep their machines up to date and to avoid coming back here with a nasty drive-by infection.
Title: Re: Fully patched PCs are a rare breed
Post by: vartismz on January 17, 2008, 02:14:29 PM
and very well said frank...
i installed and run secunia... it is only then i realized that most of the program installed on my pc is not updated...

and thanx bob for that link and info...
Title: Re: Fully patched PCs are a rare breed
Post by: bob3160 on January 19, 2008, 12:30:15 AM
and very well said frank...
i installed and run secunia... it is only then i realized that most of the program installed on my pc is not updated...

and thanx bob for that link and info...

Your welcome vartismz I hope you found it helpful.

Here's something on the lighter side:

I will guess your number (http://www.quizyourprofile.com/guessyournumber.swf)
Enjoy  :)
Title: Re: Fully patched PCs are a rare breed
Post by: vartismz on January 19, 2008, 10:21:04 AM
nice trick..  you did that? am not good with mathematics to do a program like that but i wanna learn to make a flash program, presentation or a movie... any good links? thank again bob
Title: Re: Fully patched PCs are a rare breed
Post by: bob3160 on January 19, 2008, 04:40:40 PM
Quote
nice trick..  you did that?
No, just passing on an interesting link.
If you want to learn how to create flash games, try this website (http://www.tutorialized.com/tutorials/Flash/Games/1).  :)
Title: Re: Fully patched PCs are a rare breed
Post by: vartismz on January 21, 2008, 07:23:37 AM
lots of resources and tutorials! great site thanx again bob...!