|
|||||||
| Notices |
 |
| Thread Tools |
07-30-2012, 06:32 PM
|
#1 |
|
Loremaster
Join Date: Feb 2009
Posts: 22
|
I just noticed a new plugin registered in my install of Firefox--SOE Web Installer 1.0.3.171 I did NOT authorize the installation of this plugin, I have NO idea what it is doing, nor can it be removed. It is simply not listed under "about:plugins" as it should be. It has a disable button, but I have no way of knowing if it actually does anything as all references to the plugin have been stripped out of the "about:config" pane of Firefox. I also found the following registry entry: FF - HKLMSoftwareMozillaPlugins@soe.sony.com/installer,version=1.0.3: C:Documents and SettingsownerApplication DataMozillaFirefoxProfiles5kpvldeq.defaultextensio ns{000F1EA4-5E08-4564-A29B-29076F63A37A}pluginsnpsoe.dll () So, I have a few questions. Let me make it clear that the answers to these questions (or a lack of them) will be the sole determing factor in whether or not I resubscribe next month (all three accounts). This also effects the same decision of the circle of friends I play with. In short, unsatisfactory answers will result in the cancelation of numerous accounts. Deletion of this post will act as a proxy answer. I remember the Sony Rootkit well. This had better not be another. Q: What, exactly, is this plugin supposed to be doing, for me as a customer. What benefit am I supposed to be getting from having it installed? If there is no benefit to me, what is the benefit to SOE? Q: How can I uninstall it? Q: Why was I not informed of the plugin upon installation? Q: Why, specifically, is this plugin not listed in the Firefox plugin registry (about:plugins)? For that matter, why is it not listed in "about:config"? There should be an entry along the lines of "plugin.scan.SOE", but there isn't. I will be checking back frequently to check and see if these questions are answered. Thank you. |
|
|
|
07-30-2012, 07:38 PM
|
#2 |
|
Loremaster
Join Date: Sep 2005
Posts: 236
|
Tech forum would most likely be the best place to get this answered.
__________________
Hakdagutz 92 Guardian/92 Weaponsmith Sucha 92 Conjuror/92 Sage Mrshal 92 Monk/92 Carpenter Bloodwingg 92 Necromancer/92 Tailor Tior 92 Warlock/92 Provisioner Holyer 92 Paladin/92 Armoror Grogg 90 Berserker/92 Alchemist Etat 90 Bruiser/92 Jeweler Dawizz 90 Wizard/92 Woodworker Punting 90 Brigand Kountdracula 90 Dirge Omgiman 92 Warden |
|
|
|
|
07-30-2012, 07:55 PM
|
#3 |
|
Server: Butcherblock
Guild: Test of Time
Rank: Member
Loremaster
Join Date: Jan 2007
Posts: 757
|
Looks like it has something to do with the Station Launcher. Just Google soe web installer 1.0.3.171 http://forums.station.sony.com/stat..._id=11500022738 |
|
|
|
|
07-30-2012, 08:11 PM
|
#4 |
|
Loremaster
Join Date: Feb 2009
Posts: 22
|
Well, it has an effect on my gameplay--whether or not I continue playing at all. Besides, the Mods can move it to the appropriate forum if it is indeed in the wrong place. I've done some of my own searching around and determined that at one time, this plugin was for SOE games like "Freerealms" that are browser-based. I've never used a browser-based game nor do I plan to. A web-browser is the weakest link in terms of PC security and I keep my browser tightly locked down as a result, only to have some unannounced plugin pop up as if none of my security settings mattered. From my perspective, this is a Firefox security vulnerability that SOE took advantage of--no 3rd-party application should be allowed to install browser plugins without announcing it to the computer owner. At this point my only enforcement option is to uninstall everything related to SOE and blacklist their servers at the HOST file level, then re-install Firefox. Some people do not care about such things, but I do. I do not take kindly to people doing things on my computer without my explicit permission. If someone sat down at my computer and tried the same thing, I'd smack 'em upside the head. Over-reacting? No. I took a stand when Blizzard started selling voice-chat logs to Facebook (it was, and is, in the EULA)--I canceled all of my families accounts, as did my friends--we all moved to EQ2. We keep each other informed. We discuss this sort of stuff regularly in our private Ventrilo chats. I guess you could say we act as a group when it comes to gaming. This is the last MMO we play. If we cancel, it's back to VPN multi-player games. I really hope I get a reasonable response to this post. |
|
|
|
|
07-30-2012, 08:14 PM
|
#5 |
|
Loremaster
Join Date: Nov 2004
Posts: 220
|
If the plugin is currently enabled this link has a uninstall. If you had googled "soe web installer plugin firefox" its the first search link. I downloaded the small uninstall file and it worked fine.
__________________
|
|
|
|
|
07-30-2012, 08:16 PM
|
#6 |
|
Loremaster
Join Date: Feb 2009
Posts: 22
|
Tylia@Butcherblock wrote:
Yeah, I found those as well--Seriously outdated by years. The plugin of which I speak was installed yesterday. |
|
|
|
|
07-30-2012, 08:21 PM
|
#7 |
|
Loremaster
Join Date: Feb 2009
Posts: 22
|
Lamatu wrote:
Requires me to have the plugin "enabled" to even see the page. No thanks. I disabled it the moment I found it, and it will stay that way until I find out exactly what it does. I should be able to uninstall the plugin through Firefox, but it is not even listed in the location where you do that. I have a tendency to assume I am being screwed when people try to hide things from me. Edit: That page also tries to install the same plugin the moment you load the page (No-Script blocked it). |
|
|
|
|
07-30-2012, 08:22 PM
|
#8 |
|
Loremaster
Join Date: Nov 2004
Posts: 220
|
Well you asked how to uninstall it and I answered you. Asking a mod to lock this thread.
__________________
|
|
|
|
|
07-30-2012, 08:24 PM
|
#9 |
|
Server: Everfrost
Guild: The Fallen Legion
Rank: Legionnaire
Loremaster
Join Date: Jun 2005
Posts: 84
|
From the webpage that was linked:"The SOE Web Installer is responsible for installing, updating, and launching games published by Sony Online Entertainment. It is implemented as a plugin for each supported browser." You more than likely agree to download this plug-in upon accepting the Terms of Services after installing the streaming launcher. |
|
|
|
|
07-30-2012, 08:24 PM
|
#10 |
|
Loremaster
Join Date: Feb 2009
Posts: 22
|
Lamatu wrote:
Nice to see you speak for SOE now. I asked them, not you. |
|
|
|
|
07-30-2012, 08:24 PM
|
#11 |
|
Loremaster
Join Date: Apr 2005
Posts: 9,707
|
I'm also curious how this installed without confirmation.
__________________
|
|
|
|
|
07-30-2012, 08:26 PM
|
#12 |
|
Loremaster
Join Date: Nov 2004
Posts: 220
|
You should of asked this question in 2009.
__________________
|
|
|
|
|
07-30-2012, 08:34 PM
|
#13 |
|
Loremaster
Join Date: Feb 2009
Posts: 22
|
Lamatu wrote:
Why? It wasn't installed in 2009. It was installed for the first time yesterday. |
|
|
|
|
07-30-2012, 08:36 PM
|
#14 |
|
Loremaster
Join Date: Sep 2005
Location: my own basement
Posts: 1,295
|
I want to know what it does, at this time, what dependancies EQ2 has on it, if any. Mine was also installed recently.. 2 days ago. Also not happy that it bypassed my restriction for Firefox not installing plug-ins of its own volition. Sorry, but I havent forgotten the "diagnostic" spyware they tried to foist upon us.
__________________
Never try to teach a pig to whistle. It only frustrates you and annoys the pig. 
|
|
|
|
|
07-30-2012, 08:42 PM
|
#15 |
|
Loremaster
Join Date: Feb 2009
Posts: 22
|
Atan@Unrest wrote:
Apparently, 3rd party applications can install browser plugins in Firefox. Until now, the only application I have had do this was Microsoft's Silverlight, but considering Silverlight was designed to implement Netflix digital rights at the browser level, that made perfect sense. I didn't question it since I am running Windows 7, a Microsoft product. SOE has nothing to do with my browser or my operating system, yet they insist on altering both (I got rootkitted by a Sony music CD years ago, and I haven't forgotten it--I was hoping they'd learned their lesson). Edit: Spelling and additional info |
|
|
|
|
07-30-2012, 08:43 PM
|
#16 |
|
Community Moderator
Join Date: Jul 2011
Posts: 1
|
This post has moved: /eq2/posts/preList.m?topic_id=51678...post_id=5780422 Trolling
|
|
|
|
|
07-30-2012, 08:46 PM
|
#17 |
|
Server: Oasis
Guild: Tyranny
Rank: Champion
Loremaster
Join Date: Dec 2005
Posts: 2,035
|
Atan@Unrest wrote:
If this is something that is becoming a trend, it is not one I am very fond of.I did not knowingly agree to the creation of "C:Crash" on my PC. Based on what other people have reported, the Gigs of data that was in that directory, could very well have been automatically uploaded by wws_crashreport_uploader.exe (in the EQ2 folder). I never, ever, ever want any company assuming they have any right to upload gigabytes of data from my PC, without asking me first. If that kind of data volume is going to be put on my outbound, I want to know about it.Now people are reporting plugin installations being made to their browsers, without requesting permission?I am hoping there are logical explanations to all of this, and that nothing untoward is occuring. After what happened over a year ago, SOE should be taking privacy and consumer data safety very seriously.
__________________
Templar of Oasis |
|
|
|
|
07-30-2012, 09:02 PM
|
#18 |
|
Loremaster
Join Date: May 2008
Posts: 2,601
|
Avirodar@Oasis wrote:
Now I'm curious. My "Crash" folder has files starting June 23. So either it removes files or its just existed a little over a month. And what is that "wws_crashreport_uploader.exe". And where would I find this plugin in google chrome? Firefox has been misbehaving for me lately so I haven't used it much. |
|
|
|
|
07-30-2012, 09:03 PM
|
#19 |
|
Loremaster
Join Date: Feb 2009
Posts: 22
|
SOE-MOD-12 wrote: This post has moved: /eq2/posts/preList.m?topic_id=51678...post_id=5780422 Trolling Thank you, SOE-MOD-12, for not burying this thread. |
|
|
|
|
07-30-2012, 09:15 PM
|
#20 |
|
Loremaster
Join Date: Mar 2008
Posts: 337
|
Ok so you want a non-troll post. Have you even attempted to contact Sony directly about the issue that is going to make you "quit" the game before posting your complaints on an open board that you can almost guarantee nobody is going to have a direct answer to? Posting a topic on the forums that is only going to entice others before seeking some sort of direct contact with the company in question imo...is trolling...Mr. Mod |
|
|
|
|
07-30-2012, 09:51 PM
|
#21 |
|
Tester
Join Date: Nov 2004
Posts: 3,844
|
Hmm, checked my Firefox and I show the plugin installed on July 10th. I disabled the plugin and restarted Firefox. It may be coincidence, but I've been noticing that Firefox startup is really significantly slower lately, and after disabling the plugin Firefox starts up almost immediately instead of taking up to several minutes to just load my startup page (which is a very basic html list of links saved on my desktop). Not impressed that Firefox permitted it to be installed without notification, or that SOE installed it without asking. |
|
|
|
|
07-30-2012, 10:33 PM
|
#22 |
|
Loremaster
Join Date: Feb 2009
Posts: 22
|
Verified point of install. My wife had not updated her EQ2 in the last 3 weeks. The last day she had played was the 3rd of this month. Searched file system for "npsoe.dll" and found nothing. I loaded Firefox and verified that she did not have the SOE Web Installer Plugin installed. While I had Firefox still open (CNN--her homepage, and nowhere else in that session), I booted the EQ2 Updater. It downloaded 145MB, altered and created a handful of files, then got stuck on preloading assets. It stayed stuck until I closed Firefox and the updater started preloading assets again. I suspect this "preloading assets" is the moment that the plug-in is installed as Firefox files cannot be changed while Firefox is running. Before the EQ2 updater had finished, I re-opened Firefox...and sure enough, the SOE Web Installer is installed on her machine now. |
|
|
|
|
07-30-2012, 11:20 PM
|
#23 |
|
Loremaster
Join Date: Nov 2004
Posts: 220
|
My latest findings are that even if you do uninstall it will be enabled again when you run the Launchpad even though it will show no files to update. If you do disable the plugin it will not enable again when you patch. I have not had Firefox hang or be slower because of this plugin. The following are the 120 registry changes made when the SOE plugin is installed. ----------------------------------Keys added:60----------------------------------HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftCode Store DatabaseDistribution Units{000F1EA4-5E08-4564-A29B-29076F63A37A}HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftCode Store DatabaseDistribution Units{000F1EA4-5E08-4564-A29B-29076F63A37A}ContainsHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftCode Store DatabaseDistribution Units{000F1EA4-5E08-4564-A29B-29076F63A37A}ContainsFilesHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftCode Store DatabaseDistribution Units{000F1EA4-5E08-4564-A29B-29076F63A37A}ContainsFilesFlagsHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftCode Store DatabaseDistribution Units{000F1EA4-5E08-4564-A29B-29076F63A37A}ContainsFilesFlagsnpsoe.dllHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftCode Store DatabaseDistribution Units{000F1EA4-5E08-4564-A29B-29076F63A37A}InstalledVersionHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftWindowsCurrentVersionExplorer ComDlg32FirstFolderHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftWindowsCurrentVersionInternet SettingsZoneMapDomainsclonewarsadventures.comHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftWindowsCurrentVersionInternet SettingsZoneMapDomainsfreerealms.comHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftWindowsCurrentVersionInternet SettingsZoneMapDomainssoe.comHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftWindowsCurrentVersionInternet SettingsZoneMapDomainssony.comHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftWindowsCurrentVersionModuleUs ageC:/Users/Your User Name/AppData/LocalLow/Sony Online Entertainment/npsoe.dllHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareTypeLib{000F1EA4-5E08-4564-A29B-29076F63A37A}HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareTypeLib{000F1EA4-5E08-4564-A29B-29076F63A37A}1.0HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareTypeLib{000F1EA4-5E08-4564-A29B-29076F63A37A}1.0�HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareTypeLib{000F1EA4-5E08-4564-A29B-29076F63A37A}1.0�win32HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareTypeLib{000F1EA4-5E08-4564-A29B-29076F63A37A}1.0FLAGSHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareTypeLib{000F1EA4-5E08-4564-A29B-29076F63A37A}1.0HELPDIRHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesMIMEDatabaseContent Typeapplication/vnd.sony.soeHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}ControlHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}DefaultIconHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}EnableFullPageHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}InprocServer32HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}MiscStatusHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}MiscStatus1HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}ProgIDHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}ProgrammableHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}ToolboxBitmap32HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}TypeLibHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}VersionHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}VersionIndependentProgIDHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeInterface{000F1EA4-5E08-4564-A29B-29076F63A37A}HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeInterface{000F1EA4-5E08-4564-A29B-29076F63A37A}TypeLibHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassessoex.SOEWebInstallerctlHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassessoex.SOEWebInstallerctlCLSIDHKU S-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassessoex.SOEWebInstallerctlCurVerHK US-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassessoex.SOEWebInstallerctl.1HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassessoex.SOEWebInstallerctl.1CLSIDH KUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesMIMEDatabaseContent Typeapplication/vnd.sony.soeHKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}ControlHKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}DefaultIconHKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}EnableFullPageHKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}InprocServer32HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}MiscStatusHKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}MiscStatus1HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}ProgIDHKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}ProgrammableHKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}ToolboxBitmap32HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}TypeLibHKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}VersionHKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}VersionIndependentProgIDHKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeInterface{000F1EA4-5E08-4564-A29B-29076F63A37A}HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeInterface{000F1EA4-5E08-4564-A29B-29076F63A37A}TypeLibHKUS-1-5-21-1846214994-3805040422-1747148007-1001_Classessoex.SOEWebInstallerctlHKUS-1-5-21-1846214994-3805040422-1747148007-1001_Classessoex.SOEWebInstallerctlCLSIDHKUS-1-5-21-1846214994-3805040422-1747148007-1001_Classessoex.SOEWebInstallerctlCurVerHKUS-1-5-21-1846214994-3805040422-1747148007-1001_Classessoex.SOEWebInstallerctl.1HKUS-1-5-21-1846214994-3805040422-1747148007-1001_Classessoex.SOEWebInstallerctl.1CLSID
__________________
|
|
|
|
|
07-30-2012, 11:21 PM
|
#24 |
|
Loremaster
Join Date: Nov 2004
Posts: 220
|
And the rest.... ----------------------------------Values added:60----------------------------------HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftCode Store DatabaseDistribution Units{000F1EA4-5E08-4564-A29B-29076F63A37A}ContainsFilesFlagsnpsoe.dllRedirectTo HKCU: 0x00000001HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftCode Store DatabaseDistribution Units{000F1EA4-5E08-4564-A29B-29076F63A37A}ContainsFilesC:UsersYour User NameAppDataLocalLowSony Online Entertainmentnpsoe.dll: (NULL!)HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftCode Store DatabaseDistribution Units{000F1EA4-5E08-4564-A29B-29076F63A37A}InstalledVersion: "1,0,3,171"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftCode Store DatabaseDistribution Units{000F1EA4-5E08-4564-A29B-29076F63A37A}SystemComponent: 0x00000000HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftCode Store DatabaseDistribution Units{000F1EA4-5E08-4564-A29B-29076F63A37A}Installer: "MSICD"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftWindowsCurrentVersionExplorer ComDlg32FirstFolder�: 45 00 3A 00 5C 00 54 00 65 00 6D 00 70 00 5C 00 52 00 65 00 67 00 73 00 68 00 6F 00 74 00 5F 00 31 00 2E 00 38 00 2E 00 33 00 5F 00 72 00 38 00 39 00 5F 00 78 00 36 00 34 00 5F 00 57 00 44 00 4B 00 5C 00 52 00 65 00 67 00 73 00 68 00 6F 00 74 00 2E 00 65 00 78 00 65 00 00 00 45 00 3A 00 5C 00 54 00 65 00 6D 00 70 00 5C 00 00 00HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftWindowsCurrentVersionExplorer ComDlg32FirstFolderMRUListEx: 00 00 00 00 FF FF FF FFHKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftWindowsCurrentVersionInternet SettingsZoneMapDomainssony.com*: 0x00000002HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftWindowsCurrentVersionInternet SettingsZoneMapDomainssoe.com*: 0x00000002HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftWindowsCurrentVersionInternet SettingsZoneMapDomainsfreerealms.com*: 0x00000002HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftWindowsCurrentVersionInternet SettingsZoneMapDomainsclonewarsadventures.com*: 0x00000002HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftWindowsCurrentVersionModuleUs ageC:/Users/Your User Name/AppData/LocalLow/Sony Online Entertainment/npsoe.dll.Owner: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftWindowsCurrentVersionModuleUs ageC:/Users/Your User Name/AppData/LocalLow/Sony Online Entertainment/npsoe.dll{000F1EA4-5E08-4564-A29B-29076F63A37A}: (NULL!)HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareMicrosoftWindowsCurrentVersionSharedDL LsC:UsersYour User NameAppDataLocalLowSony Online Entertainmentnpsoe.dll: 0x00000001HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareTypeLib{000F1EA4-5E08-4564-A29B-29076F63A37A}1.0�win32: "C:UsersYour User NameAppDataLocalLowSony Online Entertainmentnpsoe.dll"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareTypeLib{000F1EA4-5E08-4564-A29B-29076F63A37A}1.0HELPDIR: (NULL!)HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareTypeLib{000F1EA4-5E08-4564-A29B-29076F63A37A}1.0FLAGS: "0"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareTypeLib{000F1EA4-5E08-4564-A29B-29076F63A37A}1.0: "SOEWebInstaller 1.0 Type Library"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesMIMEDatabaseContent Typeapplication/vnd.sony.soeCLSID: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesMIMEDatabaseContent Typeapplication/vnd.sony.soeExtension: ".soe"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}MiscStatus1: "131473"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}VersionIndependentProgID: "soex.SOEWebInstallerctl"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}Version: "1.0.3.171"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}TypeLib: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}ToolboxBitmap32: "C:UsersYour User NameAppDataLocalLowSony Online Entertainmentnpsoe.dll, 4120"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}ProgID: "soex.SOEWebInstallerctl.1"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}MiscStatus: "0"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}InprocServer32: "C:UsersYour User NameAppDataLocalLowSony Online Entertainmentnpsoe.dll"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}InprocServer32ThreadingModel: "Apartment"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}DefaultIcon: "C:UsersYour User NameAppDataLocalLowSony Online Entertainmentnpsoe.dll,-1"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}: "SOE Web Installer"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeInterface{000F1EA4-5E08-4564-A29B-29076F63A37A}TypeLib: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeInterface{000F1EA4-5E08-4564-A29B-29076F63A37A}TypeLibVersion: "1.0"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassesWow6432NodeInterface{000F1EA4-5E08-4564-A29B-29076F63A37A}: "ISOEWebInstallerctl"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassessoex.SOEWebInstallerctlCurVer: "soex.SOEWebInstallerctl.1"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassessoex.SOEWebInstallerctlCLSID: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassessoex.SOEWebInstallerctl: "Sony Online Entertainment Package"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassessoex.SOEWebInstallerctl.1CLSID: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"HKUS-1-5-21-1846214994-3805040422-1747148007-1001SoftwareClassessoex.SOEWebInstallerctl.1: "Sony Online Entertainment Package"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesMIMEDatabaseContent Typeapplication/vnd.sony.soeCLSID: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesMIMEDatabaseContent Typeapplication/vnd.sony.soeExtension: ".soe"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}MiscStatus1: "131473"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}VersionIndependentProgID: "soex.SOEWebInstallerctl"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}Version: "1.0.3.171"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}TypeLib: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}ToolboxBitmap32: "C:UsersYour User NameAppDataLocalLowSony Online Entertainmentnpsoe.dll, 4120"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}ProgID: "soex.SOEWebInstallerctl.1"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}MiscStatus: "0"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}InprocServer32: "C:UsersYour User NameAppDataLocalLowSony Online Entertainmentnpsoe.dll"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}InprocServer32ThreadingModel: "Apartment"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}DefaultIcon: "C:UsersYour User NameAppDataLocalLowSony Online Entertainmentnpsoe.dll,-1"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeCLSID{000F1EA4-5E08-4564-A29B-29076F63A37A}: "SOE Web Installer"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeInterface{000F1EA4-5E08-4564-A29B-29076F63A37A}TypeLib: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeInterface{000F1EA4-5E08-4564-A29B-29076F63A37A}TypeLibVersion: "1.0"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_ClassesWow6432NodeInterface{000F1EA4-5E08-4564-A29B-29076F63A37A}: "ISOEWebInstallerctl"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_Classessoex.SOEWebInstallerctlCurVer: "soex.SOEWebInstallerctl.1"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_Classessoex.SOEWebInstallerctlCLSID: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_Classessoex.SOEWebInstallerctl: "Sony Online Entertainment Package"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_Classessoex.SOEWebInstallerctl.1CLSID: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"HKUS-1-5-21-1846214994-3805040422-1747148007-1001_Classessoex.SOEWebInstallerctl.1: "Sony Online Entertainment Package"
__________________
|
|
|
|
|
07-31-2012, 12:15 AM
|
#25 |
|
Loremaster
Join Date: Feb 2009
Posts: 22
|
Digging around, I found this article that discusses the issue of 3rd party applications installing unsolicited plug-ins, extensions and add-ons in Firefox. http://news.softpedia.com/news/Mozi...on-192843.shtml Unfortuantely, that article is from April 4, 2011. Firefox has been upgraded several times since that date...and nothing has been done. It is NOT cool for companies like SOE to use the very same tactics that malware distibutors use (perhaps I have that backwards). At some point, the user can longer tell the difference between the two. Also, this plug-in is NOT confined to just Firefox. Opera, Chrome, Firefox and IE are all getting it. Edit: Additional gripe. My little test to verify that SOE was installing the plug-in during game updates...broke the update. Game doesn't work now, nor will the "check files" function fix it. So, having a browser open while trying to update the game is enough to break the update. Lame. So now, even though I'll never have a use for the plug-in I have to do a complete re-install because it was shoved down my throat anyway. Lovely. I think I'll wait for a response from a SOE rep, here on the forums, before I re-install. Otherwise, it's looking like an uninstall. |
|
|
|
|
07-31-2012, 01:16 AM
|
#26 |
|
Loremaster
Join Date: Nov 2004
Posts: 220
|
I don't share the OP's distrust of this plugin and honestly think its harmless. I already mentioned in can be disabled in Firefox and will never be updated or enabled again unless you choose to do so. The blame rests fully with Firefox as the security procedures for unattended Plugins is the fault of Mozzila. I also said this plugin has been around since 2009 and I believe its used to help with UAC in windows and installation security problems. The default install path of the game has changed a few times over the years because of security problems. More info of the origins of this plugin is here.
__________________
|
|
|
|
|
07-31-2012, 03:46 AM
|
#27 |
|
Loremaster
Join Date: Feb 2009
Posts: 22
|
Lamatu wrote:
That is nice to know--they tried this before, people complained and their answer is to JAM IT DOWN OUR THROAT. This is a Rootkit, folks. It bypasses all administrative rights in the name of updates and uses a browser so that you cannot firewall the updater without also losing browsing access (something they figured out nobody will do without). I've had several people (friends that code for a living) looking at the registry entries that you so kindly posted (as well as their own installs, in some cases) and they all agree--they achieve exactly what I just described. Root-level administrative rights. That being said, unless you are willing to sandbox everything Sony, they cannot be trusted. I should have learned my lesson back when Sony/BMG rootkited my old XP machine. But I have learned a very valuable lesson--NEVER give a Corporation a second chance. Our entire group is canceling. 18 accounts in all, gone. We're all done with MMOs, Sony. And, YES, I will be telling everyone I know, as well as posting on tech forums about this garbage. And for those of you that haven't figured it out yet, Firefox is on-board with all of this. They've known for over two years that allowing 3rd party plug-ins without vetting them first was a huge security flaw. Yet, about an hour ago I get an "advert" tab in Firefox upon boot that extolls the virtues of 3rd party plug-ins and add-ons and presses you to update them often. Mozilla has sold out to the people with the most money, I guess. Rootkit me once, Sony--shame on you. Rootkit me twice, shame on me. It will never happen again. |
|
|
|
|
07-31-2012, 04:31 AM
|
#28 |
|
Loremaster
Join Date: Feb 2009
Posts: 22
|
Absolutely typical. The EQ2 Uninstaller didn't remove a single file. I now have to spend hours rummaging through my HD find all the crap they spread all over. Fabulous. Never again.... |
|
|
|
|
07-31-2012, 05:08 AM
|
#29 |
|
Loremaster
Join Date: Nov 2004
Posts: 220
|
BUG you may wanna try out http://waterfoxproject.org/ as thats a 64bit browser variant of Firefox. All Firefox extensions work with it and the only plugins that can be installed are 64bit which only Flash, Silverlight and Java have. It imports all your Firefox stuff on install and the only thing I had to configure was turn off harware acceleration under Advanced to make the fonts looks better. Should also mention if anyone installs this and keeps their Firefox install you don't wanna keep one or the other browser open when you launch the other.
__________________
|
|
|
|
|
07-31-2012, 10:49 AM
|
#30 |
|
Loremaster
Join Date: Sep 2005
Location: my own basement
Posts: 1,295
|
Interesting. I disabled the SOE plugin.. and lost all streaming video feeds. Shockwave You Tube etc. It wasn't that they were inoperable, they were gone. No frame, no box, a large blank space. Re-Enable SOE plugin.. and they all worked again. I have no idea how these things work. I have 2 plug ins for Firefox, Shockwave and SOE.
__________________
Never try to teach a pig to whistle. It only frustrates you and annoys the pig.
|
|
|
|
. Not to mention in the wrong section to begin with.