Spyware Warrior

Doug Taylor · Posted: Tue Nov 17, 2009 11:48 am Post subject: Java question

Hello,

When I read through your HijackThis logs you frequently tell the poster to remove the previous Java updates. As I look in Add Remove Programs I see entries for Java(TM) 6 Update 3, Java(TM) 6 Update 5, Update 7. Also, I see J2SE Runtime Environment 5.0 Update 10, J2SE Runtime Environment 5.0 Update 11. Should both prior updates for Java(TM) and J2SE be removed?

Take care,

Doug

suzi · Posted: Tue Nov 17, 2009 7:00 pm Post subject:

All the prior versions of Java should be removed, yes. Otherwise they remain vulnerable to exploits. Only the most current version should be left installed.
_________________
Former Microsoft MVP 2005-2009, Consumer Security
Please do not PM or Email me for personal support. Post in the Forums instead and we will all learn. Smile

Doug Taylor · Posted: Tue Nov 17, 2009 9:41 pm Post subject:

Hello Suzi,

Nice to have you reply and thank you very much. One has to ask though, why doesn’t SUN remove the old during the update? It seems to me that is like turning on the heater while leaving the windows open.

Take care Suzi,

Doug

suzi · Posted: Wed Nov 18, 2009 11:34 am Post subject:

The later versions of Java are supposed to remove the previous versions actually, but I'm not sure how well it works. I alway remove them manually.
_________________
Former Microsoft MVP 2005-2009, Consumer Security
Please do not PM or Email me for personal support. Post in the Forums instead and we will all learn. Smile

Osage · Posted: Thu Nov 19, 2009 7:03 am Post subject:

Because I am sometimes asked to help tweak security setting on other people's computers, I frequently find a plethora of old Java versions that need to be removed. Sometimes windows add remove
programs will easily remove the old versions and sometimes not.

In the latter case, one can download a small program called Java Ra to automate the old Java version removal process.

And while I am at it, might as well tout secunia on line tests that will alert the user to Java security holes and many more such security holes caused by obsolete program versions.

Doug Taylor · Posted: Thu Nov 19, 2009 11:50 pm Post subject:

Hello Osage,

You are well read thank you for the reply. Also, I thank you for the Java Ra tip. Definitely checking that out.

Thank you again and take care,

Doug