Gizmos Freeware Reviews  

Go Back   Gizmo's Freeware Forum > Debating Chamber > Internet, Web Apps and Networking

Reply
 
Thread Tools Display Modes
Old 30. Jun 2010, 03:50 AM   #41 (permalink)
Senior Member
 
Join Date: Mar 2010
Posts: 395
Default

Quote:
Originally Posted by bo.elam View Post
Sometimes even if you uninstall a program, the plugin remains. I am
specifically talking about Java deployment toolkit. I uninstalled Java
and previously had disabled the deployment toolkit but it remained
after Java was uninstalled.
Bo
Hi Bo... Some plug-ins seem to be "universal" in that they aren't specific to the browser, like the Java you mentioned. These are more troublesome to remove completely.
vasa1 is offline   Reply With Quote
Old 30. Jun 2010, 04:32 AM   #42 (permalink)
Senior Member
 
bo.elam's Avatar
 
Join Date: Nov 2009
Posts: 1,714
Default

Quote:
Originally Posted by vasa1 View Post
Hi Bo... Some plug-ins seem to be "universal" in that they aren't specific to the browser, like the Java you mentioned. These are more troublesome to remove completely.
Vasa1 I also see (disabled) the deployment toolkit on IE8 so maybe is like
you are saying, "universal" and will stay forever unless we use Google and
search how to remove.
Bo
bo.elam is offline   Reply With Quote
Old 30. Jun 2010, 07:04 AM   #43 (permalink)
Senior Member
 
Join Date: Mar 2010
Posts: 395
Default

I came across this:
Remove the Microsoft .NET Framework Assistant (ClickOnce) Firefox Extension
here

It's from 2009 but still gives an idea of how things "slip through" and why they are difficult to remove by design.
Quote:
Unfortunately, Microsoft in their infinite wisdom has taken steps to make the removal of this extension particularly difficult - open the Add-ons window in Firefox, and you'll notice the Uninstall button next to their extension is grayed out! Their reasoning, according to Microsoft blogger Brad Abrams, is that the extension needed "support at the machine level in order to enable the feature for all users on the machine," which, of course, is precisely the reason this add-on is bad news for all Firefox users.
No doubt there will be specific ways to remove specific annoyances but the sad part is that FF (and K-Meleon) collude in having these plug-ins as part of the original install. These plug-ins are not something that get on to our PCs post-installation because of laxity on our side. I've given the example of a MS plug-in but the same seems to apply to quite a few others.
vasa1 is offline   Reply With Quote
Old 30. Jun 2010, 07:30 AM   #44 (permalink)
Super Moderator
 
Anupam's Avatar
 
Join Date: Jul 2008
Location: India
Posts: 15,324
Default

Quote:
Originally Posted by vasa1 View Post
No doubt there will be specific ways to remove specific annoyances but the sad part is that FF (and K-Meleon) collude in having these plug-ins as part of the original install.
This part is wrong. Firefox, or K-Meleon for that matter, do not come with these plug-ins as part of the original installation. These plug-ins are added later on. For example, I did not had the .NET plug-in when I installed Firefox. This plug-in was added when I installed .NET frameworks on my system. If flash player is installed on the system, then the flash plug-in will automatically be added to Firefox. That does not mean that it came originally with Firefox.
__________________
Anupam
Anupam is online now   Reply With Quote
Old 30. Jun 2010, 07:59 AM   #45 (permalink)
Senior Member
 
Join Date: Mar 2010
Posts: 395
Default

Speaking specifically about K-Meleon. I downloaded it yesterday for the first time on my laptop.

The first thing I did was to set up the Privoxy with the log enabled so that I can see each and every request. There were no requests made for any plug-ins but when I look under help, about plug-ins I get this:

Installed plug-ins
Find more information about browser plug-ins at mozilla.org.
Help for installing plug-ins is available from plugindoc.mozdev.org.
Mozilla Default Plug-in

File name: npnul32.dll
Default Plug-in

MIME Type Description Suffixes Enabled
* Mozilla Default Plug-in * Yes
Shockwave Flash

File name: NPSWF32.dll
Shockwave Flash 10.0 r32

MIME Type Description Suffixes Enabled
application/x-shockwave-flash Adobe Flash movie swf Yes
application/futuresplash FutureSplash movie spl Yes
Java(TM) Platform SE 6 U20

File name: npjpi160_20.dll
Classic Java Plug-in 1.6.0_20 for Netscape and Mozilla

MIME Type Description Suffixes Enabled
application/x-java-applet;jpi-version=1.6.0_20 Java Applet Yes
application/x-java-bean;jpi-version=1.6.0_20 JavaBeans Yes
application/x-java-applet;version=1.6 Yes
application/x-java-bean;version=1.6 Yes
application/x-java-applet;version=1.5 Yes
application/x-java-bean;version=1.5 Yes
application/x-java-applet;version=1.4 Yes
application/x-java-applet;version=1.4.1 Yes
application/x-java-applet;version=1.4.2 Yes
application/x-java-bean;version=1.4 Yes
application/x-java-bean;version=1.4.1 Yes
application/x-java-bean;version=1.4.2 Yes
application/x-java-applet;version=1.3 Yes
application/x-java-applet;version=1.3.1 Yes
application/x-java-bean;version=1.3 Yes
application/x-java-bean;version=1.3.1 Yes
application/x-java-applet;version=1.2 Yes
application/x-java-applet;version=1.2.1 Yes
application/x-java-applet;version=1.2.2 Yes
application/x-java-bean;version=1.2 Yes
application/x-java-bean;version=1.2.1 Yes
application/x-java-bean;version=1.2.2 Yes
application/x-java-applet;version=1.1 Yes
application/x-java-applet;version=1.1.1 Yes
application/x-java-applet;version=1.1.2 Yes
application/x-java-applet;version=1.1.3 Yes
application/x-java-bean;version=1.1 Yes
application/x-java-bean;version=1.1.1 Yes
application/x-java-bean;version=1.1.2 Yes
application/x-java-bean;version=1.1.3 Yes
application/x-java-applet Yes
application/x-java-bean Yes
Java(TM) Platform SE 6 U20

File name: npoji610.dll
Classic Java Plug-in 1.6.0_20 for Netscape and Mozilla

MIME Type Description Suffixes Enabled
application/x-java-vm Java Yes
Java Deployment Toolkit 6.0.200.2

File name: npdeployJava1.dll
NPRuntime Script Plug-in Library for Java(TM) Deploy

MIME Type Description Suffixes Enabled
application/java-deployment-toolkit Yes
Adobe Acrobat

File name: nppdf32.dll
Adobe PDF Plug-In For Firefox and Netscape

MIME Type Description Suffixes Enabled
application/pdf Acrobat Portable Document Format pdf Yes
application/vnd.adobe.x-mars Acrobat Portable XML Document Format mars Yes
application/vnd.fdf Acrobat Forms Data Format fdf Yes
application/vnd.adobe.xfdf XML Version of Acrobat Forms Data Format xfdf Yes
application/vnd.adobe.xdp+xml Acrobat XML Data Package xdp Yes
application/vnd.adobe.xfd+xml Adobe FormFlow99 Data File xfd Yes
Microsoft® DRM

File name: npdrmv2.dll
DRM Netscape Network Object

MIME Type Description Suffixes Enabled
application/x-drm-v2 Network Interface Plugin nip Yes
Windows Media Player Plug-in Dynamic Link Library

File name: npdsplay.dll
Npdsplay dll

MIME Type Description Suffixes Enabled
application/asx Media Files * Yes
video/x-ms-asf-plugin Media Files * Yes
application/x-mplayer2 Media Files * Yes
video/x-ms-asf Media Files asf,asx,* Yes
video/x-ms-wm Media Files wm,* Yes
audio/x-ms-wma Media Files wma,* Yes
audio/x-ms-wax Media Files wax,* Yes
video/x-ms-wmv Media Files wmv,* Yes
video/x-ms-wvx Media Files wvx,* Yes
Microsoft® DRM

File name: npwmsdrm.dll
DRM Store Netscape Plugin

MIME Type Description Suffixes Enabled
application/x-drm Network Interface Plugin nip Yes


I'm pretty confident that if you download K-Meleon and install it, you'll see the same thing.
vasa1 is offline   Reply With Quote
Old 30. Jun 2010, 08:32 AM   #46 (permalink)
Super Moderator
 
Anupam's Avatar
 
Join Date: Jul 2008
Location: India
Posts: 15,324
Default

You see all these plug-ins because the software for these plug-ins are already installed on your system. These get associated with K-Meleon automatically when you install it on your system. I am pretty confident that if you install K-Meleon or Firefox, or any other browser, on a fresh system, which does not have Flash Player, Adobe Reader, JRE etc, installed.. then you won't see these plug-ins. Just to make sure, I installed K-Meleon on my system just now. I also see a lot of plug-ins.

You must be having Adobe Pdf Reader installed on your system... I don't have it. Instead I have PdfXchange Viewer on my system for opening PDF files. So, there is no Adobe Reader plug-in in my K-Meleon... but PdfXchange Viewer plug-in is there. If K-Meleon originally came with Adobe Reader plug-in, then it should have been on my system too, but it is not. That is evidence enough to tell that K-Meleon does not originally come with plug-ins, but these plug-ins get associated automatically when you install K-Meleon. Only the default Mozilla plug-in comes with the installation. I can also confirm this, because I have installed Firefox on a fresh system... and only the Mozilla plug-in was there. As I started to installed other software like JRE, Flash Player, Yahoo Messenger... the plug-ins started to get associated with Firefox.

Look at it logically... suppose these plug-ins do not associate automatically with K-Meleon, and you already have installed some applications like Java, Flash Player, Adobe Reader before installing K-Meleon. Now if you install K-Meleon, and you want plug-ins of these to be associated with K-Meleon... you will have to install all these applications again. That would be such a pain, wouldn't it? Therefore, when you install K-Meleon, or Firefox, these plug-ins get associated automatically. They do not come as a part of the installation file.
__________________
Anupam
Anupam is online now   Reply With Quote
Old 30. Jun 2010, 09:23 AM   #47 (permalink)
Senior Member
 
Concerned User's Avatar
 
Join Date: Apr 2010
Location: இந்தியா, सिन्धु, India
Posts: 486
Default

@ Anupam: I've disabled all my plugins except for the Mozilla Default plugin and Adobe Flash (a necessary pain). There seems to be really no use for anything else. I do not need the Acrobat plugin, the VLC plugin or anything else.

BTW, I hope you guys did not ask Firefox to automatically open the .pdf files or something since this is also a vulnerability that is being exploited especially with unknown pdf files. Of course, if you don't open unknown pdf files, it's not an issue.
Concerned User is offline   Reply With Quote
Old 30. Jun 2010, 10:09 AM   #48 (permalink)
Super Moderator
 
Anupam's Avatar
 
Join Date: Jul 2008
Location: India
Posts: 15,324
Default

Quote:
Originally Posted by Concerned User View Post
@ Anupam: I've disabled all my plugins except for the Mozilla Default plugin and Adobe Flash (a necessary pain). There seems to be really no use for anything else. I do not need the Acrobat plugin, the VLC plugin or anything else.
Same here. I have disabled plug-ins which I do not need. The ones enabled are Java, Flash Player and Mozilla default.

Quote:
Originally Posted by Concerned User View Post
BTW, I hope you guys did not ask Firefox to automatically open the .pdf files or something since this is also a vulnerability that is being exploited especially with unknown pdf files. Of course, if you don't open unknown pdf files, it's not an issue.
I do not open pdf files in Firefox normally, but I did so a few days back. I think I just clicked on the file, and it opened itself. My intention was to save it actually. After reading this, I have disabled the PdfXchange plug-in, so the pdf file won't open even by mistake.

Can you post details about the pdf vulnerability?
__________________
Anupam
Anupam is online now   Reply With Quote
Old 30. Jun 2010, 10:40 AM   #49 (permalink)
Senior Member
 
Concerned User's Avatar
 
Join Date: Apr 2010
Location: இந்தியா, सिन्धु, India
Posts: 486
Default

Wait! I think it's been fixed today?:

http://www.theregister.co.uk/2010/06...ergency_patch/

Quote:
The fixes address a vulnerability in Windows, Mac, and Linux versions of the reader that allows hackers to remotely install malware on end-users' machines by tricking them into opening a booby-trapped document. The same flaw was patched 18 days ago in Adobe's Flash Player, also in an unscheduled release because of in-the-wild attacks. The flaw resided in the authplay.dll, AuthPlayLib.bundle, or libauthplay.so.0.0.0 files on Windows, Mac, and Linux machines respectively.
Sorry Anupam! I was referring to the Adobe PDF reader and not the PDFXchange one.Hmmm...maybe it's time to uninstall the Adobe reader and replace it with PDFxchange one?
Concerned User is offline   Reply With Quote
Old 30. Jun 2010, 10:43 AM   #50 (permalink)
Senior Member
 
Join Date: Mar 2010
Posts: 395
Default

Quote:
Originally Posted by Anupam View Post
You see all these plug-ins because the software for these plug-ins are already installed on your system. These get associated with K-Meleon automatically when you install it on your system....

You must be having Adobe Pdf Reader installed on your system...

...
You are correct. I have Adobe Reader. I also searched for the DRM plug-in, npdrmv2.dll, and it was not in the K-Meleon folder but in the Windows Media directory.

So at worst, one can only question why these were enabled automatically.
vasa1 is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



All times are GMT +1. The time now is 03:05 PM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2020, vBulletin Solutions, Inc.