ky331 Posted July 4, 2008 ID:21813 Share Posted July 4, 2008 upon running my weekly Secunia Personal Software Inspector (RC3) scan, it picked up on zlib.dll (version 1.1.3.1), which is included with both MBAM and RogueRemover, as being "insecure, and potentially exposes your system to security threats", and it "strongly recommends... updat[ing] this program". What, if anything, should you [or we] be doing about this? Link to post Share on other sites More sharing options...
JeanInMontana Posted July 4, 2008 ID:21814 Share Posted July 4, 2008 Descriptionzlib.dll is part of the ZLIB compression library and is used by Windows applications for compression and decompression of files.It will be interesting to see how a compression of files can be a security risk. Did Secunia describe what the file was? Link to post Share on other sites More sharing options...
ky331 Posted July 4, 2008 Author ID:21816 Share Posted July 4, 2008 Secunia referred me here: http://www.zlib.net/ Link to post Share on other sites More sharing options...
JeanInMontana Posted July 4, 2008 ID:21819 Share Posted July 4, 2008 hmmm seems odd. Will be interesting to see what someone that knows what is used has to say. LOL I am NOT one of the programmers, seems strange to me a new program like MBAM would have outdated stuff. Link to post Share on other sites More sharing options...
ky331 Posted July 4, 2008 Author ID:21823 Share Posted July 4, 2008 Secunia is a highly reliable scanner, so I just wanted to call the results to the attention of the MBAM/RogueRemover team. if, upon consideration, the MBAM team here tells us there's nothing to be concerned about, I will happily accept their verdict. Link to post Share on other sites More sharing options...
Root Admin RubbeR DuckY Posted July 4, 2008 Root Admin ID:21829 Share Posted July 4, 2008 We use an outdated version of zlib.dll for backwards compatbility. I believe Secunia exaggerated when they said it poses a security threat. The worst that could happen is a targeted attack against Malwarebytes' Anti-Malware and it crashes. Link to post Share on other sites More sharing options...
lectrocrew Posted July 5, 2008 ID:21869 Share Posted July 5, 2008 We use an outdated version of zlib.dll for backwards compatbility. I believe Secunia exaggerated when they said it poses a security threat. The worst that could happen is a targeted attack against Malwarebytes' Anti-Malware and it crashes.I have been using Malwarebytes Anti Malware along with Secunia PSI for a couple of months and just yesterday Secunia flagged zlib as insecure. Should we select "Ignore Program" in Secunia for this zlib? The Secunia information page regarding this issue list it as being "Moderately critical". As ky331 stated, if, upon consideration, the MBAM team here tells us there's nothing to be concerned about, I will happily accept their verdict. I too trust Malwarebytes, but I must admit I'm a bit concerned. Thanks and "hi everyone" as this is my first post here. Mike Link to post Share on other sites More sharing options...
Cordialis Posted July 5, 2008 ID:21907 Share Posted July 5, 2008 The program itself - Malwarebytes' Anti-Malwarebytes - is using Zlib as a part of it's components. But a new version of Zlib is out and the brilliant Secunia PSI RC3 is doing it's job as it's supposed to. It's telling me that my Zlib should be updated. Will I ruin my Malwarebytes' if I update Zlib? Shouldn't Malwarebytes' act quickly on this an issue a new version? Link to post Share on other sites More sharing options...
Cordialis Posted July 5, 2008 ID:21908 Share Posted July 5, 2008 I'm sorry - I did not see that other thread here: http://www.malwarebytes.org/forums/index.php?showtopic=5245 Link to post Share on other sites More sharing options...
Root Admin RubbeR DuckY Posted July 5, 2008 Root Admin ID:21909 Share Posted July 5, 2008 We will update zlib.dll to the latest version after this release. Link to post Share on other sites More sharing options...
Cordialis Posted July 5, 2008 ID:21911 Share Posted July 5, 2008 I fully trust Secunia. It's genius piece of software. But I accept the explanation from Malwarebytes'. Quote: We use an outdated version of zlib.dll for backwards compatibility.Will I ruin Malwarebytes' if I replace the outdated Zlib with the current version? Link to post Share on other sites More sharing options...
Cordialis Posted July 5, 2008 ID:21912 Share Posted July 5, 2008 We will update zlib.dll to the latest version after this release.I must learn to type faster. Link to post Share on other sites More sharing options...
Root Admin RubbeR DuckY Posted July 5, 2008 Root Admin ID:21917 Share Posted July 5, 2008 Will I ruin Malwarebytes' if I replace the outdated Zlib with the current version?Yes, you will, it will not start. But it would be a fun experiment if you like. Link to post Share on other sites More sharing options...
JeanInMontana Posted July 5, 2008 ID:21919 Share Posted July 5, 2008 Secunia is a highly reliable scanner, so I just wanted to call the results to the attention of the MBAM/RogueRemover team. if, upon consideration, the MBAM team here tells us there's nothing to be concerned about, I will happily accept their verdict.It's great you brought this to us. It's been an interesting thread and we have all learned from it. Secunia is good I agree, all scanners have the ability to come up with erred results. In this case it was not, we got a good explanation as to why there was the message and it will go away soon. Link to post Share on other sites More sharing options...
JeanInMontana Posted July 5, 2008 ID:21926 Share Posted July 5, 2008 I'm sorry - I did not see that other thread here: http://www.malwarebytes.org/forums/index.php?showtopic=5245No worries I merged the two now they are all one. Link to post Share on other sites More sharing options...
Cordialis Posted July 5, 2008 ID:21931 Share Posted July 5, 2008 Yes, you will, it will not start. But it would be a fun experiment if you like. No thank you, Marcin I think I'll wait for the update. But thanks for merging the threads, JeanInMontana! Link to post Share on other sites More sharing options...
roo Posted July 6, 2008 ID:21948 Share Posted July 6, 2008 Hi allI also have been using rogue remover free for awhile now.Also i am not very computer literateI have just got the same warning. Thinking i at last had something to report, but alas i was late again I have read this topic with much interest, and found it to be most in lighting. Even someone like me can understand it. Very much impressed.Cheers Link to post Share on other sites More sharing options...
roo Posted July 6, 2008 ID:21953 Share Posted July 6, 2008 Hi againNext question will show why i don't post very often.I have just reread these posts and now relise that these posts are mainly about (Malwarebytes' Anti-Malwware)Is the zlib.dll going to be updated in rogue remover free, next time there is a program update.If i should have posted this some where else i do apologize.Cheers Link to post Share on other sites More sharing options...
JeanInMontana Posted July 6, 2008 ID:21974 Share Posted July 6, 2008 Hi roo and welcome to Malwarebytes. There is a forum specifically for RR but it's easier to just answer here. I feel safe in saying yes, when MBAM gets a new dll I'm sure RR will too. Link to post Share on other sites More sharing options...
lectrocrew Posted July 7, 2008 ID:22036 Share Posted July 7, 2008 We will update zlib.dll to the latest version after this release.We use an outdated version of zlib.dll for backwards compatbility.If you need an outdated version for technical reasons, don't update zlib on my behalf. I trust your knowledge. I have already selected 'Ignore Program' for zlib in Secunia options and it no longer list zlib as being 'insecure'.I also deleted the zlib version 1.2.3 files I had downloaded when I first tried to fix this issue (before I read this thread).FYI; The zlib 1.2.3 install did not affect the zlib.dll 1.1.3.1 file within the Malwarebytes file in 'Program FilesKeep up the good work! Link to post Share on other sites More sharing options...
Root Admin RubbeR DuckY Posted July 7, 2008 Root Admin ID:22039 Share Posted July 7, 2008 Well, we have the opportunity to update the file, so why not. It was easier to implement when we were understaffed and working for months to get this project done. Now we have more coders and more time to update potential security holes like this. Link to post Share on other sites More sharing options...
Cordialis Posted July 7, 2008 ID:22041 Share Posted July 7, 2008 My Secunia is down and won't load. I'm almost worried - that never happened before. But it fetches definitions from some https site every time you open it. Secure https or not - could just be a server issue. Only https is not supposed to go down? It's secure. Right? The company behind Secunia PSI is a top professional one but ever since the malware terrorists broke into Trend Micro's systems and managed to infect an absurd number of ordinary user PCs through Trend Micro's online scanner, House Call, you don't know what to think. Security is not secure anymore.Trust is really a thing of the past, isn't it? To some degree at least. No matter what company or product. Malware ruins everything... Link to post Share on other sites More sharing options...
roo Posted July 7, 2008 ID:22042 Share Posted July 7, 2008 Hi roo and welcome to Malwarebytes. There is a forum specifically for RR but it's easier to just answer here. I feel safe in saying yes, when MBAM gets a new dll I'm sure RR will too.Hi JeanInMontanaThanks for your reply very much appreciated.Cheers Link to post Share on other sites More sharing options...
Cordialis Posted July 8, 2008 ID:22117 Share Posted July 8, 2008 All is well that ends well. My Secunia is running again. Link to post Share on other sites More sharing options...
lectrocrew Posted July 8, 2008 ID:22127 Share Posted July 8, 2008 It was easier to implement when we were understaffed and working for months to get this project done. And all your work is greatly appreciated here. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now