SUMo : Keep your software up to date

As with most companies, customer support contact can be quite frustrating, to say the least.
I submitted the SUMo Lite download link and the SUMo Lite installer file to G Data SecurityLabs URL Submission and G Data SecurityLabs Sample Submission, mentioning G Data's false positives, and that seems to have worked.

 

Thank you for your kind assistance

 

Thank you very much.
But last week, and yesterday and earlier today as well, SUMo check timed out before there were a lot of response times recorded in the log.
If you look at the two logs that I posted last week, you can see that
last week's first log said "Min : 0 ms / Avg : 0 ms / Max : 0 ms"(!) before SUMo check timed out.
and last week's second log said "Min : 78 ms / Avg : 73 ms / Max : 141 ms", but nevertheless SUMo check timed out.

 

You're right. Most likely to be improved !

 

Kyle - I just sent you an email about a review of SuMo which I disagreed with. Hope it helps you maintain and continue your work on SuMo. Thanks.

 

I guess you mean the one at Gizmos Freeware Reviews?
As usual with comments, the comments are all over the place.
Some commenters seem to find it hard to distinguish the Regular installer, the NoRK installer and the Lite installer, and Avast flags the installer (which one?) as malware, or so is said.
The most interesting comments are those from commenter "original_steve", who states that also the Lite installer package includes the script for installing adware (even though the Lite installer doesn't offer to install any adware).
If it is correct that the Lite installer package includes the script for installing adware, even though the Lite installer doesn't offer to install any adware, then I agree that this can be confusing to anyone who would extract the installer file, like original_steve did. If it is correct that the Lite installer package includes the script for installing adware, I think it would be better to change that, and remove that script from the Lite installer package, in order to avoid any doubts about the Lite installer.

Best regards

 

Hi !

Very nice & tricky catch !

it_download.dll was packaged but NOT executed in the lite version (no sponsor installed nor downloaded).
This has been fixed in all the builds i've just re-uploaded to my website.

Thanks for reporting !!

 

Very good!
And also very good that you replied in the Gizmos Freeware Reviews comments as well.

 

@ Kyle_Katarn,

It's a pity, but according to original_steve's reply at Gizmos Freeware, there's still part of the adware and ISS script included in the SUMo Lite installer package (even though the Lite installer doesn't offer to install any adware, of course).
I guess, when you cleaned up the SUMo Lite installer package, yesterday, inadvertently not all components of the adware installation script were deleted.
I suggested original_steve that perhaps it could be helpful if he could contact you directly.

 

I'll double check immediately.

 

SUMo - 3.10.9 (Released 2014-06-09)
===================================

http://www.kcsoftwares.com/?sumo

 

SUMo - 3.10.10 (Released 2014-06-22)
====================================

http://www.kcsoftwares.com/?download

 

Thank you !
Any comment on this update ? Everything's fine ?

 

I use the zip ver.
OS Windows XP
EMET 4.1 is not loaded:

 

Any error logged in SUMo's log (CTRL+L) ?

 

I have no problems after updates. Great work

 

No error.

 

Is "Allow Microsoft products" selected in SUMo settings?
I suppose it is, as Windows Media Player and Sysinternals Process Explorer are shown in your scan results.

Was EMET loaded with the previous SUMo versions?

In the HitmanPro thread, I noticed you use EMET 4.1 Update 1.
For the digital signature of EMET 4.1 Update 1 a SHA256 based authenticode timestamp was used.
Windows XP, Server 2003 and Vista are yet unable to evaluate SHA256 based authenticode timestamps.
This results in EMET 4.1 Update 1 files shown as not validly signed.
See details in this TechNet Forums thread regarding that EMET 4.1 Update 1 issue.
That EMET 4.1 Update 1 issue resulted in the HitmanPro scan results that you mentioned in the HitmanPro thread.
I don't think the fact that EMET is not loaded in SUMo is related, but I cannot tell for sure.

As was mentioned in the TechNet Forums thread, on May 29, Microsoft re-published EMET 4.1 Update 1. This time not SHA256 but a SHA1 based authenticode timestamp was used. This solved the EMET 4.1 Update 1 signature issue for Windows XP, Server 2003 and Vista.

I you haven't done so already, you may uninstall EMET 4.1 Update 1 and download and install the new re-published EMET 4.1 Update 1.
As I said, I don't think the fact that EMET is not loaded in SUMo is related, I cannot tell for sure, but with Windows XP (or Server 2003 or Vista) it may be a good idea to use the new re-published EMET 4.1 Update 1, anyway.

 

1) Yes

2) Yes

3) Reinstall?
Too much work!

TH.

 

OK, that's clear, thanks very much.

Only the new re-published EMET 4.1 Update 1, of course.
Uninstalling, installing and configuration should take no more than about 15 minutes, I guess, and that is including importing the Popular Software protection profile.
But it is your choice, of course.

 

By the way, have you tried re-adding EMET in SUMo, using SUMo's Add button?

 

Resolved:




P.S.

At the World Cup (Brasil) is playing Italy.............

 

Nice!
By re-adding EMET in SUMo, using SUMo's Add (Aggiungi) button?

Have a good time.

 

I reinstalled EMET.
TH.