In the Aug. 16 issue, I pointed out that the Secunia Software Inspector may find multiple versions of unpatched products on your system.
Older programs and Web sites may need the older versions of run-time software. But the old run-time code represents a security risk. For the greatest safety, uninstall the older files and then install updated software.
Removing outdated versions of risky applications
A number of readers seemed flummoxed by this situation. Chris Vetter gives us his take:
- “Scott Dunn’s article brought attention to the outdated versions of Java, Flash Player, QuickTime, and Adobe Reader existing on many people’s computers. He failed to point out this is not necessarily because people fail to update, rather because applying the latest update does not remove the older versions. This helps explain why so many computers tested positive.
Subscribe to our Windows Secrets Newsletter - It's Free!
Get our unique weekly Newsletter with tips and techniques, how to's and critical updates on Windows 7, Windows 8, Windows XP, Firefox, Internet Explorer, Google, etc. Join our 480,000 subscribers!
Subscribe and get our monthly bonuses - free!
Want to hack the new Start screen and tiles for your Win8 Device, the new Lock screen, the new tile-based apps, or the automatic notification information? Yes, you can do that. How about running other operating systems inside Windows 8, running Windows 8 on a Mac, or hacking SkyDrive and social media? We'll show you how to do that as well. Get this excerpt and other 5 bonuses if you subscribe now!
“A step-by-step instruction is needed for the often-required manual removal of the artifacts of Registry entries and old folders.”
When you’re ready to remove the software, open the Control Panel and double-click Add or Remove Programs. In the case of Java, an entry for each version normally appears in the Add or Remove Programs list. Select the version you don’t want, click Remove, and follow any other prompts you see on screen. Repeat for each outdated version.
Note that not all versions have the same name. For example, the name of some entries for Java begin with “Java,” some begin with “J2SE,” and so on. So scan the list carefully to find the version you want to remove.
If the software you want to remove does not appear in the Add or Remove Programs list, you can always delete the outdated file or files listed in the Secunia report. This may not completely uninstall the product (for example, any Registry entries will be unaffected), but at least you will have removed the files that hackers need to cause harm.
For help on removing older versions of Flash Player, see the next section.
Ferreting out old versions of Flash Player
Many readers of the Aug. 16 story on Secunia Software Inspector had the same question as Gordon Pinkham:
- “When I tell Software Inspector to browse in non-default locations for old media players, it comes up with quite a few, most particularly Macromedia Flash players. Unfortunately, they do not appear in the Control Panel, so they can’t be deleted that way.
“I have used Adobe’s routine for uninstalling old Flash ActiveX controls. But that apparently doesn’t work on old Macromedia players.
“Can you tell me how to get rid of old Macromedia players?”
If that doesn’t work for you, Adobe’s support team has published a TechNote explaining how to manually remove Flash Players version 6 and earlier from your computer. Just follow the steps at the link.
Update Checker points to newest versions
Reader Tom Kustner points out another tool that checks your software for updates:
- “I have also used the FileHippo.com Update Checker, which will look at your system and determine which packages need updating, including the ones you mentioned (Flash, Java, RealPlayer, WMP, etc). It gives you one-stop shopping for downloads.”
As Tom points out, the results page for Update Checker includes a download button for each. But a newer version is not always desirable in these cases — for example, when a product changes from freeware in one version to shareware in another. If you use Update Checker, look into the tradeoffs before you upgrade.
NetChk expiration forces a shift in tactics
In the July 13, 2006, issue, editorial director Brian Livingston recommended Shavlik Technologies’ NetChk Protect. He described it as a way for experienced Windows users to avoid installing Microsoft’s WGA (Windows Genuine Advantage) utility.
As reader Jon Bondy reminds us, NetChk Protect was free for users on up to 10 PCs for one year:
- “I used Shavlik for most of a year, but it now says my trial version has expired. Many of your other readers are about to encounter the same situation. What do you recommend that we do?”
For now, we recommend novices use Microsoft Update, which is an improvement over the built-in Windows Update. Change its setting to Notify me but don’t automatically download or install them. Then keep reading Windows Secrets to learn which updates it may be inadvisable to install.
Advanced users who want a separate patch management system can check out the options listed on the Security Baseline page of the Windows Secrets Web site.
Don’t lose those Office shortcuts
In the Aug. 16 issue, I explained how to create shortcuts to Microsoft Office applications with the PsExec utility. Office’s default Start menu shortcuts do not have editable command lines. But reader Robin Penny points out an advantage of these installer-created shortcuts:
- “These ‘nonstandard’ shortcuts not only launch the program but also initiate a self-repair process if key files or Registry keys are missing. I would advise users who create a PsExec shortcut for these to also retain a copy of the old shortcut in order to maintain an entry point to this self-repair mechanism.”
Readers Vetter, Pinkham, Hart, Kustner, Bondy, and Penny will each receive a gift certificate for a book, CD, or DVD of their choice for sending tips we printed. Send us your tips via the Windows Secrets contact page.