On 16 Apr 2010 at 9:28, Gavin Wilby wrote:
> I keep seeing this turning up on some users desktops. I had a feeling
> its an option on an Acrobat download but now Im not sure. Can anyone
> confirm where its coming from please?
McAfee scanner is offered as an checked-by-default option on Adobe Reader
downloads and ISTR maybe seeing it also on Adobe Flash updates.
Best bet IMHO is to nuke the auto-update features on all Adobe products and
handle it from the admin side. Ditto for Java's updater. Who needs all these
little autoupdaters running in the background all the time when you as admin
watch this for your people?
Nuke Adobe Updater & RAM-consuming "speed launcher":
============= Included Stuff Follows =============
Set WshShell = WScript.CreateObject("WScript.Shell")
JAuto = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Adobe
ARM"
WshShell.RegDelete JAuto
JAuto = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Adobe
Reader Speed Launcher"
WshShell.RegDelete JAuto
============= Included Stuff Ends =============
Nuke Java Updater:
============= Included Stuff Follows =============
Set WshShell = WScript.CreateObject("WScript.Shell")
JAuto =
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SunJavaUpdateSched"
WshShell.RegDelete JAuto
============= Included Stuff Ends =============
I've also seen but don't have handy the reg.keys to disable Adobe Reader's &
Acrobat's updater options permanently so (l)users can't re-enable them. The
default is in HKCU but if you set HKLM equivalents these override it for all
users, very handy.
Install the offline JRE and the Adobe MSP update files using "/passive
/norestart" command-line switches and you'll bypass the checked-by-default
"Bing/Yahoo!/Google Toolbar" or other piggyback crapware, too!
HTH
Angus
--
Angus Scott-Fleming
GeoApps, Tucson, Arizona
1-520-895-3270
Security Blog: http://geoapps.com/
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
