Forum Thread: Net Framework 3.x

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Microsoft
And, this specific program:
Microsoft .NET Framework 3.x

This thread has been marked as locked.
petesel1 Net Framework 3.x
Member 23rd Nov, 2011 00:56
Ranking: 0
Posts: 9
User Since: 29th Nov, 2010
System Score: N/A
Location: CH
[b]Unfortunately, I cannot copy the text from the trubleshootreport. So I have to type it again![b]

[b]Program Name:[b]
Microsoft.Net Framework 3.x : SMSvcHost.exe version 3.0.4506.2123

[b]Microsoft Security Patches Not Installed:[b]
KB2617986

[b]Program resp. State:[b]
Insecure

[b]Threat Rating[b]
4 (orange)

[b]Download Link:[b]
http://update.microsoft.com/microsoftupdate/

[b]Missing Microsoft Patches (KB numbers):[b]
Kb2617986

[b]Instances Found:[b]
C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
version: 3-0.4506.2123

[b]Last System Scan (Swiss localtime)[b]
22.Nov 2011, 1511

[b]Operating System[b]
Microsoft Windows Vista

[b]Trouble:[b]
Windows Update doesn't find update patch. Impossible to get and install it manually.
Cannot understand support articles resp. cannot find on my computer whrere instruction tells to go.
Cannot find the patchnumbers indicated by Secunia in the patchlists of related patchlists of Microsoft/Windows.

[b]Additional Circumstances:[b]
Problem started contemporaryly with securityupdate KB2617986 for Microsoft Silverlight.
This Update did not work and I uninstalled Silverlight after a number of unsuccessful attempts. Inspite this uninstallation of Silverlight, Microsoft summons to update it. But there is no way to reinstall Silverlight.
Sometehing maybe not properly adjusted in the registry?



--
One can apparatuses, engines, machines and other technical and algorithmic devices and systems let do jobs and work but one cannot let them take responsibility for the results of what they do and how they work.

Maurice Joyce RE: Net Framework 3.x
Handling Contributor 23rd Nov, 2011 01:38
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
1. To copy & paste to the Forum U must highlight the text press CTRL+C to copy then CTRL+V to paste any detail.



2. Have U tried installing Silverlight from here?

http://www.microsoft.com/getsilverlight/Get-Starte...

U will note the web page has an uninstaller U can use before attempting a clean install.

Once complete run a full PSI scan - what if any problems remain?



--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+1
-0
petesel1 RE: Net Framework 3.x
Member 23rd Nov, 2011 22:29
Score: 0
Posts: 9
User Since: 29th Nov 2010
System Score: N/A
Location: CH


--
One can apparatuses, engines, machines and other technical and algorithmic devices and systems let do jobs and work but one cannot let them take responsibility for the results of what they do and how they work.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Net Framework 3.x
Handling Contributor 23rd Nov, 2011 22:38
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
What vulnerabilities are still showing after a full PSI scan?

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
petesel1 RE: Net Framework 3.x
Member 24th Nov, 2011 16:13
Score: 0
Posts: 9
User Since: 29th Nov 2010
System Score: N/A
Location: CH
Last Full System Scan : 22.11.2011 15:11
At this time, the described problem was already existing.
Based on this PSI 2.0 full System Scan the Results are : Secunia System Score 97%.

Insecure Programs listed:
- Microsoft.NET Framework 3.x, det.v. 3.0.4506.2123, Threat Rating 4, inst.sol.: MS Update

- Microsoft.NET Framework 4.x, det.v. 4.0.30319.1, Threat Rating 4, install sol.: MS Update

All other programs checked by PSI are patched. and Up-to date, few of which autoupdating.

In systemmanager resp. programmanager there is a tool as well to switch on/off Windows-Functions. German name:"Windows-Funtionen ein- oder ausschalten" I never saw, forget used this tool before.
There, I detected right now: Microsoft.NET Framework 3.0 is shown to be switched on partly only (box filled with blue color instead of marked) This means:
[ ] Windows Communication Foundation HTTP Activation = off
[ ] Windows Communication Foundation Non-HTTP Activation = off
[x] XPS Viewer = on
There are no corresponding switches for Microsoft.NET Framework 4.x

Partly switched on is as well:
- Druckerdienste (Printer Service) Internetdruckclient

Fully switched on are: (I have no englich translation at hand, I even cannot understand the german terms!)
- Optionale Tablet PC-Komponenten
- Remoteunterschiedskomprimierung
- Windows-DFS-Replizierungsdienst
- Windows-Teamarbeit

Programs installed but not expressively listed in PSI:

Microsoft.NET Framework : (herinafter "MNF")
- MNF 3.5 SP1
- MNF 4 Client Profile
- MNF 4 Client Profile DEU Lang...
- MNF 4 Client Profile Extended
- MNF 4 Client Profile DEU Lang...

Microsoft :
- Microsoft Silverlight (this program is shown with document-icon in the program mgt. list)
- Microsoft SQL Server 2005 Compact Edition [ENU] [shown w. docu-icon only)

Windows :
- Windows Live Anmelde-Assistent (docu icon only)
- Windows Live Essentials
- Windows Live Uploadtool (docu icon only)
We do not use windows Life

Windows programs listed on PSI with Windows(TM):
- Windows DVD Maker

PSI lists : Canon My Printer 2.x.
The following Canon programs listed in the list to choose programs to get repaired or uninstalled are missing on the PSI-list:
Canon Easy-WebPrint EX
Canon IJ Network Scan Utility
Canon IJ Network Tool
Canon Inkjet Printer/Scanner/FaxExtended Survey Pr..
Canon MP640 series MP Drivers
Canon MP Navigator EX 3.0
Canon Utilities Easy-PhotoPrint EX
Canon Utility My Printer (comprised in Canon My Printer 2.x listed in PSI?)
Canon Utilities Solution Menu
I didn't care about this much because the printer is used from this machine only very exceptionally (just for tests). Probably, some of the Canon-programs are differently named in the PSI list (e.g. with names containing the word "print")

Other programs missing on PSI list :

- GPL Ghostscript Light 8.70

- Intel (R) Matrix storage Manager
- Internet Security (F-Secure, real-time autoupdating

- Motorola SM56 Data Fax Modem

- O2Kicro Flash Memory Card Windows Driver V.3.00
- Office-Screensaver de

- Picasa 3 (not used any longer)

- Real Alernative 2.0.2

Realtek :
- Realtek 8139 and 8139C+ Ethernet Network Card Driver for Windows Vista
- Realtek High Definition Audio Driver
Realtek-programs listed on PSI (instead?)
- Realtek AC 97 Update and remove driver Tool 2.x
- Realtek Voice Manager 2.x

- Spelling Dictionaries Support For Adobe Reader 8 (docu icon only)
- System Requirements Lab for Intel

- TestOnlineDiagnostic (docu icon only)

It was my Idea tho compare the list of installed programs with the programs checked by PSI because without knowing about lacking programs the scan result might be incomplete. That gave my quite some more work to be done than expected. Sorry for inundating You with info's I cannot judge as a simple user whether important or not.
Thank You in advance at any rate for what You may advice me .

petesel1










--
One can apparatuses, engines, machines and other technical and algorithmic devices and systems let do jobs and work but one cannot let them take responsibility for the results of what they do and how they work.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Net Framework 3.x
Handling Contributor 24th Nov, 2011 16:54
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Run a complete manual Windows Update scan.

What updates does it show that are not installed?

All I need is the KB number of each item that is not installed.

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
petesel1 RE: Net Framework 3.x
Member 25th Nov, 2011 14:23
Score: 0
Posts: 9
User Since: 29th Nov 2010
System Score: N/A
Location: CH
Last edited on 26th Nov, 2011 14:35
The code of the "innocent criminal" is KB2617986. It fails dayly with every retry of automatic Windows update since 15.10.2011 (No other result with "manual" download and installation attempt),
while were successful during same period :
always : KB915597 Windows Defender Definition 1.~
monthly : KB890830 malware removing tool
19.11.11 : KB951847 Microsoft.NET Framework 3.5 SP1 x86-Language pack

The list of - allegedly - installed Windows updates (which I detected right now) shows Microsoft Silverlight 4.0.60531.0 to have been installed june 16.06.2011.
Contrary to other Updates scheduled, there is no KB-number indicated for this alledged update of Silverlight.
The impossibility to uninstall this update is described in my first post in this thread.

Successful Updates (KB...) of June 16 2011 : KB2539530 KB2539581 KB2543854 KB905866 KB935509 KB937954 KB956250
Update of June 17. 2011 : KB941600

No further Updates after 17.06.11 until latest scheduled 13.09.2011 Adobe Reader X (10.1.1)

Latest Update before 16.06.2011 : 11.05.2011 KB2540162


AMENDMENT of 26.11.2011 : WHY THIS THREAD CAN BE CLOSED AND GETS CONTINUED ON THREAD https://secunia.com/community/forum/thread/show/11...

For Your convenience, I quote what I mentioned in my post of 24th Nov, 2011 16:13:

"In systemmanager resp. programmanager there is a tool as well to switch on/off Windows-Functions. German name:"Windows-Funtionen ein- oder ausschalten" I never saw, forget used this tool before.
There, I detected right now: Microsoft.NET Framework 3.0 is shown to be switched on partly only (box filled with blue color instead of marked) This means:
[ ] Windows Communication Foundation HTTP Activation = off
[ ] Windows Communication Foundation Non-HTTP Activation = off
[x] XPS Viewer = on
There are no corresponding switches for Microsoft.NET Framework 4.x"

This brought me, slowly enough, to the idea to risk the experience of the result of switching off totally Microsoft.NET Framework 3.0 in the settings of this tool.
The result was the enhancement of Secunia security resp. invulnerability level from 97% to 98%.
Checking the details of the Scanresult shows that Microsoft.NET Framework 3.0 is no longer scheduled on the Secunia list of threatenig programs.







--
One can apparatuses, engines, machines and other technical and algorithmic devices and systems let do jobs and work but one cannot let them take responsibility for the results of what they do and how they work.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Net Framework 3.x
Handling Contributor 26th Nov, 2011 15:06
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
I think you should read this thread before trying anything else. I would suggest U use the removal tool & start again with .NET issues.

http://secunia.com/community/forum/thread/show/116...

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
petesel1 RE: Net Framework 3.x
Member 28th Nov, 2011 14:46
Score: 0
Posts: 9
User Since: 29th Nov 2010
System Score: N/A
Location: CH
Thank You very much, Maurice.

I supposed that I rather will not need MS NET Framework than it could be useful to me as an unexperienced user.

That's why I uninstalled MNF in a contraprodictive way, not knowing about certain prior versions being prerequisits for later ones. MS is not really userfriendly and safe guiding for neophytes when it comes to problems. And the automatic update rates this update as required, not optional.

I can live with the situation, as long as it is not worsening, until buying a new LT to replace the one affected by the described issues. I do not have time left to become an expert in MS.
I need my machines as tools for my researches, not to repair them.

--
One can apparatuses, engines, machines and other technical and algorithmic devices and systems let do jobs and work but one cannot let them take responsibility for the results of what they do and how they work.
Was this reply relevant?
+0
-0

This thread has been marked as locked.