vinemt
Active Contributor
Joined 13 years ago
User Profile
User Widgets
Contributions
Re: 'Kaspersky Software Updater' keeps installing, but I got rid of Kaspersky AV
Silent uninstall string is msiexec.exe /x{DEEDA858-A9B4-4212-8873-2F2CE2706E68} /qb It may be part of their new 3rd party software updater system, so if you use that check for further guidance. We don't. I'll post back if the software recurs after this removal. Edit 10/27/17 - So far, no recurrance of the installs.18KViews1like1CommentRe: 'Kaspersky Software Updater' keeps installing, but I got rid of Kaspersky AV
We use a different application for 3rd party software so I actually had "Application Updates Disabled" set on every computer on my network since LMI's application update inception. When this went down, my Nessus scans revealed that LMI had installed the Kaspersky updater on every machine on my network, servers included. It was flagged as a Critical vulnerability on my network since it installs with improper permissions set on its .dlls16KViews1like0CommentsRe: 'Kaspersky Software Updater' keeps installing, but I got rid of Kaspersky AV
It looks like LogMeIn autoinstalled Kaspersky Software Updater without asking. Additionally, it was installed in an insecure manner introducing a vulnerability on every machine on my network. It installed the KSU service and gave "Everyone" control over the service therefore unprivileged users can modify the properties of this service, allowing an unprivileged, local attacker to execute arbitrary code or commands as SYSTEM. https://support.microsoft.com/en-us/help/914392/best-practices-and-guidance-for-writers-of-service-discretionary-acces https://msdn.microsoft.com/en-us/library/ms685981(VS.85).aspx This is Unacceptable. Additionally, there doesn't seem to be a silent uninstaller, which means every system must be visited. LogMeIn - where do you get off autoinstalling Kaspersky software onto our machines?16KViews2likes2Comments