🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: adobe.reader
Article #10001

Re: What should I do in response to this "Critical Security Alert"

#10001
From: prepbgg
Date: Fri, 05 Jan 2007 21:25
49 lines
3931 bytes
I hope the following details might help anyone who might find
themselves in the same perplexing position as I was.

When nobody had replied to my first post, I did some further googling
and found some pages mentioning that my issue might be related to one
dealt with in the following "Security Bulletin" from Adobe:
http://www.adobe.com/support/security/bulletins/apsb06-19.htm

The Security Bulletin mentioned a vulnerability in Adobe Download
Manager version 2.1 Although it wasn't clear that the problem covered
by the Bulletin had any bearing on the messages I was getting, I
followed Adobe's instructions to remove the old version of the Download
Manager.

The Critical Security Alert dialog was still open on my desktop, so I
summoned the courage to click on the "Install Now" button. This
resulted in an error message reporting a failure to remove a file from
my PC because the file wasn't there.

As a result of all this I presume that the sequence of events was as
follows:
1. Adobe's automatic updating process tried to download a program to
remove the old buggy version of the Download Manager.
2. Something on my PC intervened and popped up the Install Now dialog
referring to the Critical Security Alert - Software Removal Tool.
3. I presume that the correct response would have been to click
"Install Now" in order to install the tool which would have removed the
offending program.
4. I've no idea what would have happened if I had clicked "Remove".
Probably it would have removed the removal tool, as a result of which
the program which Adobe wanted removed would not have been removed!

So far (a day later) nothing untoward has happened. A virus check by
AVG has reported no viruses.

I don't know who (Adobe, Microsoft, or someone else) was responsible
for the wording of the "Install Now" dialog that popped up on my
screen. But I hope they can see that it is not exactly helpful to worry
an ignorant user by telling him that he has a critical security problem
involving a "software removal tool" and then invite him to choose
(without any explanation) between "Removing" or "Installing" an
unidentified thing with an unspecified relationship to the "Critical
Security Alert - Software Removal Tool". If user intervention is
required and if it is not possible to arrange for a self-explanatory
dialog box then, at the very least, Adobe should put a page on their
website using the same phrases as those in the dialog box so that a
Google search on those phrases will throw up authoritative explanation
as to what is going on, what is being removed or installed, and what
will be achieved by clicking on "Remove" or "Install".
Technical Details
Message-ID: <1168032317.834587.248830@s80g2000cwa.googlegroups.com>
Path: arc1-ca.pugleaf.net!g2news2.google.com!postnews.google.com!s80g2000cwa.googlegroups.com!not-for-mail
References: <1167920617.046279.99920@s80g2000cwa.googlegroups.com>

Show Full Headers
Complete Article Headers
X-Google-Thread: 10273d,fb7f1218fdd1c714
X-Google-Attributes: gid10273d,public
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news2.google.com!postnews.google.com!s80g2000cwa.googlegroups.com!not-for-mail
From: prepbgg@googlemail.com
Newsgroups: adobe.reader
Subject: Re: What should I do in response to this "Critical Security Alert"
Date: 5 Jan 2007 13:25:18 -0800
Organization: http://groups.google.com
Lines: 50
Message-ID: <1168032317.834587.248830@s80g2000cwa.googlegroups.com>
References: <1167920617.046279.99920@s80g2000cwa.googlegroups.com>
NNTP-Posting-Host: 195.166.149.244
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Trace: posting.google.com 1168032324 18640 127.0.0.1 (5 Jan 2007 21:25:24 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: Fri, 5 Jan 2007 21:25:24 +0000 (UTC)
In-Reply-To: <1167920617.046279.99920@s80g2000cwa.googlegroups.com>
User-Agent: G2/1.0
X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1,gzip(gfe),gzip(gfe)
Complaints-To: groups-abuse@google.com
Injection-Info: s80g2000cwa.googlegroups.com; posting-host=195.166.149.244;
   posting-account=lsXjzQ0AAABYJ0bfAp8yypSnkeemVNA6