What are these mToolkit programs on my Dell laptop (Can I just remove them?)?

[David H. Lipman]

From: "lisa harkema" <lisa.harkema@gmail.com>


|
| I have the following on my Dell laptop:
| C:\Program Files\Java\j2re1.4.2_03
|
| Does that mean I should remove it and re-install a newer Java?
| What does Java do for me anyway?
| I never execute any program called "Java" (sounds silly).
|
| What is Java and why do I need it if it's exploited anyway?
| All I do is look at web pages (I hate fancy moving web pages so I
| don't ever even install Flash or RealPlayer, yuck!).
|
| Do I really need this Java in the first place?
| Lisa

It sure does need to be removed ! That is know to vulnerable and is actively being
exploited.

As for needing Sun Java wellthat's a whole different story that I won't get into.
Java is an interpreter for specific content. Becuase Java runs the same on different
operating systems, any web site using Java will show the saem content no matter what the OS
or browser that is used.

Remove ALL versions of Sun Java and replace it with v5 update 9.

In the middle of the page...
http://java.sun.com/javase/downloads/index.jsp

"Java Runtime Environment (JRE) 5.0 Update 9"

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[lisa harkema]

On Sun, 8 Oct 2006 09:35:38 -0500, "Shenan Stanley"
<newshelper@gmail.com> wrote:

>Should have a sticker on the machine itself...

It has a "Windows XP Home Edition" product key but not a CDROM key.
Dunno if that matters (my previous installations of WinXP required
both a product key and a CDROM key).

Lisa

[lisa harkema]

On Sun, 08 Oct 2006 14:39:52 GMT, "David H. Lipman"
<DLipman~nospam~@Verizon.Net> wrote:

>Remove ALL versions of Sun Java and replace it with v5 update 9.
>http://java.sun.com/javase/downloads/index.jsp
>"Java Runtime Environment (JRE) 5.0 Update 9"

OK. Following your advice verbatim, I went to:
http://java.sun.com/javase/downloads/index.jsp

And then went to the section titled:
Java Runtime Environment (JRE) 5.0 Update 9
The J2SE Runtime Environment (JRE)
allows end-users to run Java applications

And then clicked on the "DOWNLOADS" button:
https://sdlc5d.sun.com/ECom/EComActi...9C4911876D3839

WHich, after forcing me to accept some kind of license
http://192.18.108.138/ECom/EComTicke...ows-i586-p.exe
Gave me the latest Java thingey.

I installed it but I really don't know what or why I installed it.

WHy would I (a normal person) need this Java download.
What happens if I don't have it?
(BTW, I have Java and Javascript turned off in my browser as I hate
anything but a normal web page and have no patience for rotating
images and things of that ilk).

Do I really need this Java thing (especially since I have it turned
off in my browser)?

Lisa

[David H. Lipman]

From: "lisa harkema" <lisa.harkema@gmail.com>

< snip >

|
| I installed it but I really don't know what or why I installed it.
|
| WHy would I (a normal person) need this Java download.
| What happens if I don't have it?
| (BTW, I have Java and Javascript turned off in my browser as I hate
| anything but a normal web page and have no patience for rotating
| images and things of that ilk).
|
| Do I really need this Java thing (especially since I have it turned
| off in my browser)?
|
| Lisa
|

What is MORE important was did you remove all the older versions ?

Is v5 update 9 the *ONLY* version now on your PC ?

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[glee]

"lisa harkema" <lisa.harkema@gmail.com> wrote in message
news:53chi29ihr7ists0vrackufjb72o4lft4h@4ax.com...
> On Sun, 8 Oct 2006 01:57:53 -0400, "glee" <glee29@spamindspring.com>
> wrote:
>
>>Hi Lisa,
>>I think what you may be seeing are programs that were installed by the OEM (Dell,
>>in
>>this case) that they did not want the end user to remove, possibly because they
>>are
>>integral to certain features of the laptop, or to their support plan. Most if not
>>all of the entries appear to be for troubleshooting and configuring an Intel
>>wireless adapter and drivers (does the laptop have an integrated wireless
>>adapter?).
>>Removing the items may well be "shooting yourself in the foot" if the applications
>>are needed for the functioning of your wireless adapter. I would *not* remove any
>>of them for that reason. Have you asked Dell support personnel about them?
>>
>>The most likely reason they all have an "m" at the front of their names is that
>>one
>>method to hide an item in the Registry's uninstall keys is to use the
>>"ApplicationDisplayName" string to identify the items to be hidden. The OEM may
>>have used a script to hide all entries in the Uninstall key whose DisplayName
>>began
>>with "m" at the time the system was built (before you got it and installed more
>>apps).
>>
>>I would be wary of the suggestion to wipe the system and install fresh from a
>>Windows CD only because you may find items such as the integrated wireless adapter
>>no longer work, unless you can download and install the drivers and configuration
>>apps from Dell.....in which case you'd likely be back where you began, but with
>>the
>>items perhaps no longer hidden. That assumes that Dell has those apps available
>>for
>>download.
>>
>>Hope this helps.
>
> Oop. I already deleted some of them. And, YES, I DO have a wireless
> card installed by the manufacturer. I'd better hold off on deleting
> them I guess. I got rid of about half of them. I generally don't use
> the wireless card but I do use it when I travel.
> Lisa

Well, I don't have a Dell laptop to check on, so I can't say what, if any,
functionality or configuration may be affected. Have you contacted Dell Support
about the issue? Considering how many cleaning utilities may show those hidden and
unexplained items, it would behoove them to explain what they are and if they are
required for proper function, and if so, how to reinstall them without restoring the
whole system.

What model is the laptop, and how old? It may be that you can use the wireless
without those items. If they are needed, it may be that you can easily reinstall
them using the Application CD's that came with the system. Dell Support *should* be
able to tell you, though you may have to ask the first-tier support person to
escalate your call to a supervisor.

It would have been nice if they hadn't hidden the items in the first place, causing
this kind of confusion. I have an Acer laptop with integrated wireless. Since some
Acer's use the same wireless adapter as Dell, I am going to run CCleaner on the
laptop and see if it also shows such entries.

You can see in this copy of an Acer installation .ini file that the Intel Pro
wireless adapter installs the items you are seeing (just remove the "m" from the
beginning of the names and search the page for them):
http://72.14.209.104/search?q=cache:...1&client=opera
--
Glen Ventura, MS MVP Shell/User, A+
http://dts-l.org/goodpost.htm

[Lew]

lisa harkema wrote:
> On Sun, 08 Oct 2006 14:39:52 GMT, "David H. Lipman"
> <DLipman~nospam~@Verizon.Net> wrote:
>
>> Remove ALL versions of Sun Java and replace it with v5 update 9.
>> http://java.sun.com/javase/downloads/index.jsp
>> "Java Runtime Environment (JRE) 5.0 Update 9"
>
> OK. Following your advice verbatim, I went to:
> http://java.sun.com/javase/downloads/index.jsp
>
> And then went to the section titled:
> Java Runtime Environment (JRE) 5.0 Update 9
> The J2SE Runtime Environment (JRE)
> allows end-users to run Java applications
>
> And then clicked on the "DOWNLOADS" button:
> https://sdlc5d.sun.com/ECom/EComActi...9C4911876D3839
>
> WHich, after forcing me to accept some kind of license
> http://192.18.108.138/ECom/EComTicke...ows-i586-p.exe
> Gave me the latest Java thingey.
>
> I installed it but I really don't know what or why I installed it.
>
> WHy would I (a normal person) need this Java download.
> What happens if I don't have it?
> (BTW, I have Java and Javascript turned off in my browser as I hate
> anything but a normal web page and have no patience for rotating
> images and things of that ilk).
>
> Do I really need this Java thing (especially since I have it turned
> off in my browser)?
>
> Lisa

Java is a programming language. Javascript is a different programming
language, despite the similarity of names.

There is a vulnerability in the interaction between Java and Javascript within
a browser that Sun patched in version 1.4.2_06 and later. It is not present in
version 1.5+. If you aren't even using Java there is no risk from it. If you
run Java but not Javascript there is no risk from it. The vulnerability only
occurs when running mini-programs in Java called "applets" in combination with
certain malicious Javascript scripts in the browser.

There are other Java exploits that require a Trojan (short for "Trojan
horse"), a program that has already loaded itself onto your computer, to have
replaced legitimate Java with a malicious version.

You do not need Java unless you want to run Java programs such as applets. If
you do not run these programs, Java is not an issue. If you run neither Java
nor Javascript the particular exploit won't bite you.

It is not a bad thing to replace Java 1.4 with Java 1.5 as the other poster
suggested. Meanwhile I doubt you have anything to fear. You should be much
more concerned with conventional viruses, Trojans and other malicious software
("malware") that does not use Java. Good antivirus, anti-spyware, firewall
and similar software is your protection.

Avoid panicking just because one person sounds a "sky is falling" alert.

I recommend that you confirm what I told you with your own research. ("Google
is your friend.") I am not a security expert and I only know what I've been
able to research so far.

- Lew

[David H. Lipman]

From: "Lew" <lew@nowhere.com>


|
| Java is a programming language. Javascript is a different programming
| language, despite the similarity of names.
|
| There is a vulnerability in the interaction between Java and Javascript within
| a browser that Sun patched in version 1.4.2_06 and later. It is not present in
| version 1.5+. If you aren't even using Java there is no risk from it. If you
| run Java but not Javascript there is no risk from it. The vulnerability only
| occurs when running mini-programs in Java called "applets" in combination with
| certain malicious Javascript scripts in the browser.
|
| There are other Java exploits that require a Trojan (short for "Trojan
| horse"), a program that has already loaded itself onto your computer, to have
| replaced legitimate Java with a malicious version.
|
| You do not need Java unless you want to run Java programs such as applets. If
| you do not run these programs, Java is not an issue. If you run neither Java
| nor Javascript the particular exploit won't bite you.
|
| It is not a bad thing to replace Java 1.4 with Java 1.5 as the other poster
| suggested. Meanwhile I doubt you have anything to fear. You should be much
| more concerned with conventional viruses, Trojans and other malicious software
| ("malware") that does not use Java. Good antivirus, anti-spyware, firewall
| and similar software is your protection.
|
| Avoid panicking just because one person sounds a "sky is falling" alert.
|
| I recommend that you confirm what I told you with your own research. ("Google
| is your friend.") I am not a security expert and I only know what I've been
| able to research so far.
|
| - Lew

Not totally accurate. You said "...It is not present in version 1.5+." V5 update 5 and
below have the vulnerability. The problem exists even if you have a vulnerable version and
a non-vulnerable version as the Exploit code will seek and find the vulnerable version of
Sun Java.

http://sunsolve.sun.com/search/docum...=1-26-102557-1

and

http://sunsolve.sun.com/search/docum...=1-26-102171-1

I'll repeat, the vulnerability is actively being exploited. Most well know is the Vundo
Trojan/Virtumonde Adware. Since the Vundo has recently morphed (again!) one can vsit a web
site, be infected and the anti virus software may not even catch the Exoploit nor the
subsequent infection. This certainly warrants more attention to the OPs other post about
"Webfldrs XP".

I also find it interesting that while the OP did NOT know anything about Java, she decided
to cross-post this to; comp.lang.java.programmer This is a vulnerability/security issue,
not a programming issue.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[lisa harkema]

On Sun, 08 Oct 2006 16:59:55 GMT, "David H. Lipman"
<DLipman~nospam~@Verizon.Net> wrote:

>| Do I really need this Java thing (especially since I have it turned
>| off in my browser)?

>What is MORE important was did you remove all the older versions ?
>Is v5 update 9 the *ONLY* version now on your PC ?

Yes. Thank you for asking. I followed your instructions which said to
remove the old Java before installing the new Java.

Thank you for alerting me to the newer Java. I still don't know why I
need it in the first place but I'm glad to have the latest, I guess,
just in case the old one was compromised.

Of course, the new one will be compromised soon ... (and to think, I
remember something about someone saying Java was secure a decade ago).

Jeez. Whatever it is, it sure ain't secure!
Thanks for the advice,
Lisa

[lisa harkema]

On Sun, 08 Oct 2006 15:48:16 -0400, Lew <lew@nowhere.com> wrote:
>Java is a programming language. Javascript is a different programming
>language, despite the similarity of names.
>
>There is a vulnerability in the interaction between Java and Javascript within
>a browser that Sun patched in version 1.4.2_06 and later. It is not present in
>version 1.5+. If you aren't even using Java there is no risk from it. If you
>run Java but not Javascript there is no risk from it. The vulnerability only
>occurs when running mini-programs in Java called "applets" in combination with
>certain malicious Javascript scripts in the browser.

Oh my. Thank you Lew. I do very much appreciate the advice as to what
Java and Javascript are. I never knew. I just knew that I hate when my
web browser does funky things like spin the icons and other silly
browser tricks. I turn off all that flash, realmedia, java,
javascript, etc. stuff the moment I install a browser. So, I guess I
wasn't vulnerable in the first place.

Still, it's nice to know I have the latest Java installed now
(although that will have a vulnerability in a short while if history
is any judge). That's why I prefer to have as few items running on my
system as possible ... hence the desire to rid myself of these 'm'
progams that everyone seems to have running, by default (if they use
CCleaner to show the true list of running programs).

Thanks,
Lisa

[David H. Lipman]

From: "lisa harkema" <lisa.harkema@gmail.com>

| On Sun, 08 Oct 2006 16:59:55 GMT, "David H. Lipman"
| <DLipman~nospam~@Verizon.Net> wrote:
|
>|> Do I really need this Java thing (especially since I have it turned
>|> off in my browser)?
|
>> What is MORE important was did you remove all the older versions ?
>> Is v5 update 9 the *ONLY* version now on your PC ?
|
| Yes. Thank you for asking. I followed your instructions which said to
| remove the old Java before installing the new Java.
|
| Thank you for alerting me to the newer Java. I still don't know why I
| need it in the first place but I'm glad to have the latest, I guess,
| just in case the old one was compromised.
|
| Of course, the new one will be compromised soon ... (and to think, I
| remember something about someone saying Java was secure a decade ago).
|
| Jeez. Whatever it is, it sure ain't secure!
| Thanks for the advice,
| Lisa

It is NOT a case of the software being compromised. It is a case of a bug in older
versions. That bug is considered a vulnerability because one can exploit the vulnerability
to install software without your consent. There is NO evidence that the version 5 update 6
and above have this vulnerability.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm