Article View: adobe.reader
Article #10001Re: What should I do in response to this "Critical Security Alert"
From: prepbgg
Date: Fri, 05 Jan 2007 21:25
Date: Fri, 05 Jan 2007 21:25
49 lines
3931 bytes
3931 bytes
I hope the following details might help anyone who might find themselves in the same perplexing position as I was. When nobody had replied to my first post, I did some further googling and found some pages mentioning that my issue might be related to one dealt with in the following "Security Bulletin" from Adobe: http://www.adobe.com/support/security/bulletins/apsb06-19.htm The Security Bulletin mentioned a vulnerability in Adobe Download Manager version 2.1 Although it wasn't clear that the problem covered by the Bulletin had any bearing on the messages I was getting, I followed Adobe's instructions to remove the old version of the Download Manager. The Critical Security Alert dialog was still open on my desktop, so I summoned the courage to click on the "Install Now" button. This resulted in an error message reporting a failure to remove a file from my PC because the file wasn't there. As a result of all this I presume that the sequence of events was as follows: 1. Adobe's automatic updating process tried to download a program to remove the old buggy version of the Download Manager. 2. Something on my PC intervened and popped up the Install Now dialog referring to the Critical Security Alert - Software Removal Tool. 3. I presume that the correct response would have been to click "Install Now" in order to install the tool which would have removed the offending program. 4. I've no idea what would have happened if I had clicked "Remove". Probably it would have removed the removal tool, as a result of which the program which Adobe wanted removed would not have been removed! So far (a day later) nothing untoward has happened. A virus check by AVG has reported no viruses. I don't know who (Adobe, Microsoft, or someone else) was responsible for the wording of the "Install Now" dialog that popped up on my screen. But I hope they can see that it is not exactly helpful to worry an ignorant user by telling him that he has a critical security problem involving a "software removal tool" and then invite him to choose (without any explanation) between "Removing" or "Installing" an unidentified thing with an unspecified relationship to the "Critical Security Alert - Software Removal Tool". If user intervention is required and if it is not possible to arrange for a self-explanatory dialog box then, at the very least, Adobe should put a page on their website using the same phrases as those in the dialog box so that a Google search on those phrases will throw up authoritative explanation as to what is going on, what is being removed or installed, and what will be achieved by clicking on "Remove" or "Install".
Technical Details
Message-ID:
<1168032317.834587.248830@s80g2000cwa.googlegroups.com>Path:
arc1-ca.pugleaf.net!g2news2.google.com!postnews.google.com!s80g2000cwa.googlegroups.com!not-for-mailReferences:
<1167920617.046279.99920@s80g2000cwa.googlegroups.com>Show Full Headers
Complete Article Headers
X-Google-Thread: 10273d,fb7f1218fdd1c714 X-Google-Attributes: gid10273d,public X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news2.google.com!postnews.google.com!s80g2000cwa.googlegroups.com!not-for-mail From: prepbgg@googlemail.com Newsgroups: adobe.reader Subject: Re: What should I do in response to this "Critical Security Alert" Date: 5 Jan 2007 13:25:18 -0800 Organization: http://groups.google.com Lines: 50 Message-ID: <1168032317.834587.248830@s80g2000cwa.googlegroups.com> References: <1167920617.046279.99920@s80g2000cwa.googlegroups.com> NNTP-Posting-Host: 195.166.149.244 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" X-Trace: posting.google.com 1168032324 18640 127.0.0.1 (5 Jan 2007 21:25:24 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: Fri, 5 Jan 2007 21:25:24 +0000 (UTC) In-Reply-To: <1167920617.046279.99920@s80g2000cwa.googlegroups.com> User-Agent: G2/1.0 X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1,gzip(gfe),gzip(gfe) Complaints-To: groups-abuse@google.com Injection-Info: s80g2000cwa.googlegroups.com; posting-host=195.166.149.244; posting-account=lsXjzQ0AAABYJ0bfAp8yypSnkeemVNA6