topic Re: WARNING! Regarding older versions of Adobe Reader and Java in Norton Internet Security / Norton AntiVirus

WARNING! Regarding older versions of Adobe Reader and Java

itsme — Thu, 19 Mar 2009 21:42:48 GMT

I would advise everyone here to uninstall any older version of Adobe Reader and install version 9.1.

I would also advise everyone to uninstall and any older version of Java Runtime Environment (Java) and install JRE 6.

Adobe Reader 7 ( and I also understand 8 as well) has an exploit in it that allows Trojans to be placed through it, even if you don't open it up ( the offending websites will do that for you).

I also read elsewhere that the older versions of JRE are also vulnerable.

I speak from experience!

I was taking an online survey from a site that I normally use. It redirects surveys to other sites at times.

When the page opened, all of a sudden my Adobe Reader 7 (fully updated) opened up in several places on the desktop.

Note that I had it turned off even on the start menu (even the updater). Using task manager you would never see it running.

The only time it would run of course is when a webpage called for it to do so.

So I ended up having to use task manager to turn it off in several places in addition to the 4 or 5 places that opened up in windows on the desktop!

I was using Trend Micro, Webroot SpySweeper, and Zone Alarm Pro Firewall at the time ( not to mention a Prosafe Hardware Firewall in my router with VPN).

Also, I always keep my Windows Patches current via update manager.

The only warning that I received was that it was being blocked by my Anti-Virus Program.

I ended up getting a Trojan and some nasty adware and other things ( in the registry keys as well) .

I couldn't do a search without being hijacked after clicking on the seach results. I also couldn't get into my registry and some other things as well.

I just got it resolved through help on this forum.

Please do yourselves a favor and update those 2 items!

[edit: changed subject to better reflect thread topic.]

Message Edited by Tim_Lopez on 03-19-2009 02:42 PM

Re: WARNING! Regarding older versions of Adobe Reader and Java

cinek — Thu, 19 Mar 2009 21:43:19 GMT

emm I don't get it - what does this have to do with norton????

[edit: changed subject to better reflect thread topic.]

Message Edited by Tim_Lopez on 03-19-2009 02:43 PM

Re: WARNING! Regarding older versions of Adobe Reader and Java

NY1986 — Thu, 19 Mar 2009 21:44:04 GMT

I think because the fact that it causes a security issue that would in turn have to involve Norton products to protect your machine... or some such.

Thanks' itsme, I don't doubt what you say Can we have some other confirmation of this? I installed Adobe reader 9.1 and it appears that it removed the older version. Would that be true?

I also have Java Runtime environment 6 I also still have 1.6.0_2, 1.6.0_3 , 1.6.0_5, and 1.6.0_7

If I delete those, what function would I lose?

Also in my temporary internet files under downloaded objects I have several instances of JRE1.6.0 version 6.0.120.4

do those need to go?

Message Edited by NY1986 on 03-19-2009 05:18 AM

[edit: changed subject to better reflect thread topic.]

Message Edited by Tim_Lopez on 03-19-2009 02:44 PM

Re: WARNING! Regarding older versions of Adobe Reader and Java

j2000 — Thu, 19 Mar 2009 21:44:54 GMT

cinek wrote:
emm I don't get it - what does this have to do with norton????

Less malware for Norton to have to clean up after? :smileywink: :smileytongue: :smileywink:

But seriously, though, it is a security-related topic, and Norton is a security-related product, and we're all interested in security (right?), so I don't mind seeing some preventative tips/reminders once in a while about how to stay safe(r). At least that's how it seems to me at the moment.

Edited to add:

Oops, I should have refreshed the page to see new messages before I posted, 'cause NY1986 said basically what I was thinking. :smileywink:

Message Edited by j2000 on 03-19-2009 05:39 AM

[edit: changed subject to better reflect thread topic.]

Message Edited by Tim_Lopez on 03-19-2009 02:44 PM

Re: WARNING! Regarding older versions of Adobe Reader and Java

GreatNate1312 — Thu, 19 Mar 2009 21:45:47 GMT

If I uninstall adobe reader 9 will I lose all my adobe files? I need those??? As for java I just updated java a few weeks ago through there website/

Message Edited by GreatNate1312 on 03-19-2009 06:10 AM

[edit: changed subject to better reflect thread topic.]

Message Edited by Tim_Lopez on 03-19-2009 02:45 PM

Re: WARNING! Regarding older versions of Adobe Reader and Java

GreatNate1312 — Thu, 19 Mar 2009 21:46:01 GMT

UPDATE- Never mind- to get to version 9.1, open adobe, click help, go down to check for updates, and install ALL updates. Its that simple! A restart isnt even needed. In no time youll be atversion 9.1! As for java, you can go to there website and check if you have the latest version. If you dont have the reccomended version you just download it from there site!

click the link and then hit DO I HAVE JAVA?

http://java.com/en/download/dt_verify.jsp?plugin=true&latest=true&users_jre=1.6.0_12

Message Edited by GreatNate1312 on 03-19-2009 06:19 AM

[edit: changed subject to better reflect thread topic.]

Message Edited by Tim_Lopez on 03-19-2009 02:46 PM

Re: WARNING! Regarding older versions of Adobe Reader and Java

Gorg — Thu, 19 Mar 2009 21:46:17 GMT

This: "I was using Trend Micro, Webroot SpySweeper, and Zone Alarm Pro Firewall at the time"

If you're running all that at the same time, you have bigger problems than you realize.

Also, you don't mention using Norton anywhere, yet you received help here, why didn't you seek help over at Trend's site? Or Webroot? Or Zonealarm?

Message Edited by Gorg on 03-19-2009 05:31 PM

[edit: changed subject to better reflect thread topic.]

Message Edited by Tim_Lopez on 03-19-2009 02:46 PM

Re: WARNING!

itsme — Thu, 19 Mar 2009 22:36:42 GMT

Howdy all.

The reason that I posted this is:

I don't want anyone else to go through the same problem that I did!

And yes, I'm a NIS user ( NIS 2009 version 16.5).

You can install the programs any way that you see fit. I prefer to uninstall the old versions before instaling the new ones, but that's just me...

Yes, I ran The three programs together (zone alarm pro, spysweeper, trend micro).

What I did was install trend micro without the firewall, using zone alarm pro for the firewall (with the anti-spyware section turned off on zone alarm)

I ran spysweeper but with with the e mail monitoring turned off, using the one in trend micro (as it was superior).

I also didn't use the newer version of zone alarm but version 7.0.483 etc; For less conflicts.

But off course there were some conflicts and slightly slower response.

The set up worked well for me for a number of years, but with the newer program updates there started to be a bit more of a conflict.

With Norton improving their firewall on a level about par with zone alarm pro and their anti-virus seeming to equal or exceed trend micro's new models and their anti-spyware superior to trend micro's according to what I have read, I switched to NIS2009.

That's my story.

Message Edited by itsme on 03-19-2009 04:52 PM

Message Edited by itsme on 03-19-2009 05:36 PM

Re: WARNING! Regarding older versions of Adobe Reader and Java

huwyngr — Thu, 19 Mar 2009 22:03:03 GMT

cinek wrote:
emm I don't get it - what does this have to do with norton????

Adobe recently issued a security warning about a serious security hole in their products Acrobat and Acrobat Reader and while fixes are in progress they advised immediate upgrade to 9.1 for those who have 8 or earlier isntalled.

This is a security program area! <s>

PS I upgraded my AR8.1 on my VISTA to make sure it is smooth so I must do it on my really active XP setup.

Non-security warning -- read every screen when installing AR 9.1 and uncheck a few boxes or you will get ISTR 3 Google bits you may not want!

Re: WARNING!

huwyngr — Thu, 19 Mar 2009 22:06:30 GMT

Thanks for the warning/reminder.

Did you avoid the Google extras? <s>

I had no problem with installing on top of 8.1 BTW -- it did what it should I'm sure and invoked the same uninstall module as Remove Programs does -- the one written by Adobe!

Re: WARNING!

mo — Fri, 20 Mar 2009 02:24:45 GMT

Hi.....itsme

I appreciate your warning and I agree it's good to have it posted in these forums,often you wonder why you have to update all the time.You have just shown why it's important so thanks.

And I have to say I love your choice in name!! Classic! :smileyvery-happy:

Re: WARNING! Regarding older versions of Adobe Reader and Java

TooStrong — Fri, 20 Mar 2009 03:01:48 GMT

Ok, I am confused now.

I did a update check on my Adobe Reader 8.1.3 and I updated to 8.1.4. It never updated to 9.1 or even asked me if I wanted to update to 9.1

Am I not able to install 9.1?

Does 8.1.4 solve the security issue?

Do I need to go to their website and try to install 9.1 since I already have 8.1.4?

And if I do need to update to 9.1 should I uninstall 8.1.4 myself or will adobe do it when it is installing 9.1?

Enlighten me please?

Re: WARNING! Regarding older versions of Adobe Reader and Java

SendOfJive — Fri, 20 Mar 2009 03:37:34 GMT

TooStrong,

Yes the 8.1.4 update does patch this vulnerability for users of Adobe Reader 8. Adobe recommends upgrading to Adobe Reader 9.1 if your system meets the requirements and you are able to do so. To do this you would uninstall your present version through Add/Remove Programs, reboot, and install AR9.1, available here: http://get.adobe.com/reader/

No problem staying with 8.1.4 though, if you prefer. Adobe discusses the options here:

http://www.adobe.com/support/security/bulletins/apsb09-04.html

Message Edited by SendOfJive on 03-19-2009 08:37 PM

Re: WARNING! Regarding older versions of Adobe Reader and Java

i7 — Fri, 20 Mar 2009 03:27:09 GMT

You should be ok on Adobe Reader 8.1.4 per this http://blogs.adobe.com/psirt/

Of course, if you can, update to 9.1.0. You can remove 8.1.4 manually through add/remove and then install 9.1, or just install it over the top and let it automatically remove the old version during installation.

Depending on where you get the download it may be bundled with Adobe AIR (41.1mb download) or just Adobe Reader alone (16.3mb).

Re: WARNING! Regarding older versions of Adobe Reader and Java

mo — Fri, 20 Mar 2009 03:33:41 GMT

Hi TooStrong

I went from Sart>Control panel>Add/remove> Clicked on my Adobe reader the box comes up with "Click here for support information" I clicked on that then chose the last in the list 'product updates'Clicked on it and it took me to this page

http://get.adobe.com/reader/

Which has the Adobe reader 9.1,Remember to uncheck the google tool bar if you don't want it. Hope it makes things clearer?

Re: WARNING! Regarding older versions of Adobe Reader and Java

TooStrong — Fri, 20 Mar 2009 03:58:21 GMT

SendofJive and I7 both say to update if I can and if I have the system requirements. I haven't looked at the requirements yet, but since my computer is only 1 year old, I should be ok there. Other than the requirements are there other issues that would prevent me from installing 9.1 I went to adobes website,and on there it also said to download to 9.1 if i can, if not then at least update to 8.1.4. What I am getting at is, I don't want to uninstall 8.1.4 if I can't install 9.1? What would stop me from downloading and installing 9.1? other then the system requirements?

Thanks

Re: WARNING! Regarding older versions of Adobe Reader and Java

SendOfJive — Fri, 20 Mar 2009 03:59:02 GMT

A good tool to make sure you are up to date on security patches for the applications on your computer is to run the free Software Inspector from Secunia. It is available as either an online scanner or as a more comprehensive program that you install on your PC. About.com reviews it here:

http://antivirus.about.com/od/antivirussoftwarereviews/gr/secuniainsp.htm

Secunia webpage is here:

http://secunia.com/vulnerability_scanning/

Re: WARNING! Regarding older versions of Adobe Reader and Java

Phil_D — Fri, 20 Mar 2009 04:19:03 GMT

Hi TooStrong,

The only other factor to consider is if you are using Adobe Acrobat (to create PDF's). Your update in that case would be limited to the highest version of Acrobat that you have. That is part of what Adobe means by "If you can".

As an example I have Adobe Acrobat 8. I can update to 8.1.4 on both Adobe Acrobat and Reader. If I choose to update to a higher version of reader, I will lose some functionality in Acrobat.

If this does not apply to you, and you only have Reader installed, you can update to 9.1.

Hope that helps.

[edit: added content]

Message Edited by Phil_D on 03-20-2009 12:19 AM

Re: WARNING! Regarding older versions of Adobe Reader and Java

SendOfJive — Fri, 20 Mar 2009 04:20:18 GMT

TooStrong wrote:
What would stop me from downloading and installing 9.1? other then the system requirements?

Adobe 9 adds more "features" such as a new application called Adobe AIR, and adds a desktop icon for Acrobat.com. Some people prefer to stay with the old, less encumbered software, while others prefer the newer bells and whistles. As has been mentioned a couple of times, read the installation screens carefully and uncheck any foist-ware such as toolbars, etc., that you do not want to install.

Re: WARNING! Regarding older versions of Adobe Reader and Java

TooStrong — Fri, 20 Mar 2009 04:27:04 GMT

Thanks for all the advice. I really don't even use Adobe reader that much that I know of. So I might update to 9.1 later.