Author Topic: Microsoft stealthily installs a Firefox add-on that cannot easily be uninstalled  (Read 17406 times)

0 Members and 1 Guest are viewing this topic.

spg SCOTT

  • Guest
Polonus,

I have FF clear everything itself after every session, but then this may not be enough...

That guy probably wont be very popular for a while :)

As you said, we have to be VERY careful what we install nowadays, with MS exploiting every loophole possible.
It's a good thing there are some out there that can help us who don't know (you included ;))

-Scott-

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Hi spg SCOTT,

Well more of this discussion starting to evolve here:
http://forums.informaction.com/viewtopic.php?f=8&t=1446&p=4843#p4843
And interesting to see what they will respond to me asking this:
Quote
Thanks for that explanation, but is not it unusual for MS to install propriety software in this way without asking the end user specifically if they like to install this? What they will do to their OS that's their business, but what they do to third party software (Mozilla's fx) can that be done over the head of the users or was this brought in with explicit consent of the developers of Firefox 3.5
and here:
Quote
can you confirm this was being brought in by developer consent? I think it will be a better policy if these silent global add-on installs can be performed on a "per user basis", where the end user can decide whether he wants the added feature installed or not
So where you come to your conclusion that you have to be very attentive to what you agree when installing something onto your machine, you are absolutely right. Sign of the times that is where it is going. If users don't wake up or protest to it it will be customary policy,
From fx standpoint this is what is meant by a global install: http://www.ghacks.net/2007/11/12/install-firefox-add-ons-for-all-users/
About the dangers of this add-on in Fx: This update adds to Firefox one of the most dangerous vulnerabilities present in all versions of Internet Explorer: the ability for websites to easily and quietly install software on your PC. Since this design flaw is one of the reasons you may've originally choosen to abandon IE in favor of a safer browser like Firefox, you may wish to remove this extension with all due haste.

Unfortunately, Microsoft in their infinite wisdom has taken steps to make the removal of this extension particularly difficult - open the Add-ons window in Firefox, and you'll notice the Uninstall button next to their extension is grayed out! re: http://www.annoyances.org/exec/show/article08-600

polonus
« Last Edit: May 26, 2009, 12:24:01 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48524
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Damien,
I still want to know what harm this install is doing to my system if any ???
Up till now, that question hasn't been answered. The M$ bashing is in full force but,
I still can't figure out what harm that install is doing to my system ???
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

drhayden1

  • Guest
Quote
I still can't figure out what harm that install is doing to my system
it's in my add-ons also but should i disable it-leave as is if it is doing no harm as Bob mentioned or
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=cecc62dc-96a7-4657-af91-6383ba034eab As a result, the Uninstall button will be functional in the Firefox Add-ons list after this install and then uninstall it or WHAT ::) ::) ??? ??? ???
« Last Edit: May 26, 2009, 12:52:15 AM by drhayden1 »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Hi bob3160,

This has nothing to do with MS bashing. You can read:
Quote
the ability for websites to easily and quietly install software on your PC
, and that is a reason for some to switch to Fx in the past. If MS brings this silently into Fx with or without consent of the Fx developers it "could" be putting my OS at risk while using Fx.
I liked MS from the days that they neatly prompted us in a polite way like "Do you really want to do this?".
Since Vista I missed that.
And again this has nothing to do with MS or Mac or linux. This is upbuilding criticism, not windows bashing. If one has criticism of something that is wrong with the Windows platform is that Windows bashing, or is it so that there is no room anymore for criticism. I do not care if it is Windows or Google or whatever, I just want the users of Firefox to know, and the users of IE8 also since this was brought in and did not add security.
Bob3160, I am trained at Microsoft Education Center and my Certificates of Achievement are hanging on the wall in my computer room. Am I a Windows basher?

Damian
« Last Edit: May 26, 2009, 12:56:43 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48524
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Hi bob3160,

This has nothing to do with MS bashing. You can read:
Quote
the ability for websites to easily and quietly install software on your PC
, and that is a reason for some to switch to Fx in the past. If MS brings this silently into Fx with or without consent of the Fx developers it "could" be putting my OS at risk while using Fx.
I liked MS from the days that they neatly prompted us in a polite way like "Do you really want to do this?".
Since Vista I missed that.
And again this has nothing to do with MS or Mac or linux. This is upbuilding criticism, not windows bashing. If one has criticism of something that is wrong with the Windows platform is that Windows bashing, or is it so that there is no room anymore for criticism. I do not care if it is Windows or Google or whatever, I just want the users of Firefox to know, and the users of IE8 also since this was brought in and did not add security.
Bob3160, I am trained at Microsoft Education Center and my Certificates of Achievement are hanging on the wall in my computer room. Am I a Windows basher?


Damian
Damien,
The windows bashing isn't coming from you. Your post is critisizing MS for something they should not have done.
Avastfan on the other hand is bashing MS.
I would still like to know what actual harm this add-on is doing to my system or to FF.
Thanks,
Bob
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Hi bob3160,

If you disable it inside Fx, none I guess, if that is what you wanna hear, but you have to disable it.
Further info I give you when the maker of NoScript extensions answered my questions. I will keep you informed, but be aware when you are using IE8, because that has it by default.. You did upgrade, did not you?

Damian
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

drhayden1

  • Guest
Quote
If you disable it inside Fx, none I guess, if that is what you wanna hear, but you have to disable it.
I disabled mine-what's that i smell-Smoke ;D

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48524
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
I still don't know why it needs to be disabled??? What harm is it doing when it's left running ???
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Hi bob3160,

MS's reasoning, according to Microsoft blogger Brad Abrams, is that the extension needed "support at the machine level in order to enable the feature for all users on the machine," which, of course, is precisely the reason this add-on is bad news for all Firefox users, the same reason why I do not have automatic updating enabled in Windows. I like to have control of what I want or do not want from them, and what I may later need I store on a peripheral for the time being, same with .NET here,

Damian
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48524
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Quote
the same reason why I do not have automatic updating enabled in Windows.
Mine is enabled. Users choice. So I guess this is too.
I did check the two options in the settings of this add on so that I'll be alerted if it's ever needed.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

CharleyO

  • Guest
***

A little off topic but ...

Here we go.

Micro$oft at it again. They really are cunning stunts.

Can anyone tell me how to check if this piece of shit is installed on my machine?

Would be very grateful!

Thanks in advance!



AvastFan1,
Like the wordplay ;D


-Scott-

The phrase originated with an album title by the British band Caravan :

http://www.caravan-info.co.uk/backcatalogue/

[ 9th album released in 1975 ... I'm a long time fan :) ]


***

Avastfan1

  • Guest
Hi Avastfan1,

Here is the uninstall information:
http://blogs.msdn.com/brada/archive/2009/02/27/uninstalling-the-clickonce-support-for-firefox.aspx

polonus

Hi Polonus,

Thanks for the information. I had a look in Firefox under extensions, themes and plugins but I couldn't find an entry 'Microsoft .NET Framework Assistant' as per your link (http://blogs.msdn.com/brada/archive/2009/02/27/uninstalling-the-clickonce-support-for-firefox.aspx)

Does this mean that it is not installed on my system Polonus?

Many thanks for your time and assistance.

Avastfan1
« Last Edit: May 26, 2009, 11:56:30 AM by Avastfan1 »

Offline .: L' arc :.

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1780
  • Thinking with Portals
-= I noticed mine to be grayed out.. Somewhat incompatible to Firefox [Beta 4].. Will it still be running in background or doing other processes even if it is incompatible to FF..?
Windows 7 (64-bit) Home Premium SP1
avast! 9 RC1

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
<snip>
Thanks for the information. I had a look in Firefox under extensions, themes and plugins but I couldn't find an entry 'Microsoft .NET Framework Assistant' as per your link (http://blogs.msdn.com/brada/archive/2009/02/27/uninstalling-the-clickonce-support-for-firefox.aspx)

Does this mean that it is not installed on my system Polonus?

The .NET framework isn't a part of the OS (currently) and as such unless an application that you use requires it then you don't need it, if it does need it it may either come with it to be installed or give a link to download and install.

I have one program on my system that requires it and if it weren't for that I wouldn't have it on my system, just something else to have to keep up to date. The .net framework updates are notorious for causing confusion and not only that failing to install.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security