- 注册时间
- 2007-1-30
- 最后登录
- 2020-5-28
- 在线时间
- 5745 小时
- UID
- 100
- 阅读权限
- 200
- 精华
- 4
- 积分
- 13295
- 帖子
- 13847
- 学币
- 31363
- 学分
- 10526
 
- 帖子
- 13847
- 学币
- 31363
- 学分
- 10526
- 贡献
- 106
- 贝壳
- 163
- 文采
- 5
|
本帖最后由 卡乔鸟 于 2009-6-16 11:24 AM 编辑
華盛頓郵報 報導:
微軟在二月份對於 windows 用戶提供的更新當中, 默默地幫您自動安裝了一個 firefox 套件。 這個套件會讓 firefox 變得和
IE 一樣, 容易接受不明網站自動在您的電腦上安裝軟體。
(微軟很貼心地不准您反安裝, 所以步驟有點繁鎖。) 當然啦, 移除也只是暫時的。 就算您拒絕微軟自動更新,微軟下一波的自動更新也還是有可能貼心地強迫更新, 再度在您不知不覺當中, 違背您意志, 把這個後門撬開, 就像 過去發生的事一樣。
破除方法：
1）打开注册表（在左下角的start按run，在空框中输入regedit）
2）打开一下键值：
# On 32-bit systems: HKEY_LOCAL_MACHINE \ SOFTWARE \Mozilla \ Firefox \ Extensions# On x64 systems: HKEY_LOCAL_MACHINE \SOFTWARE \ Wow6432Node \ Mozilla \ Firefox \ Extensions
3）删除该键值{20a82645-c095-46ed-80e3-08825760534b}
4）关闭注册表5）打开firefox，在地址栏（输入网址的地方）输入about:config（记得按确定）
6）在Filter的框里输入microsoftdotnet，会出现general.useragent.extra.microsoftdotnet的设定值
7）在general.useragent.extra.microsoftdotnet按右键，选择重置Reset。
8）打开档案管理器Windows Explorer（或是my computer）
在地址栏输入%SYSTEMDRIVE%\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation.
9）清空DotNetAssistantExtension文件夹
10）打开firefox，按下左上角的工具tools的附加组件extension，确认Microsoft .NET Framework Assistant已经被移除了。
你安全了！放心，firefox不是属于Microsoft，并不会因为删除了一个间谍而当机的。
The Microsoft .NET Framework 3.5 Service Pack 1 update, pushed throughthe Windows Update service to all recent editions of Windows inFebruary 2009, installs the Microsoft .NET Framework Assistant firefoxextension without asking your permission.
This update adds to Firefox one of the most dangerous vulnerabilitiespresent in all versions of Internet Explorer: the ability for websitesto easily and quietly install software on your PC. Since this designflaw is one of the reasons you may've originally choosen to abandon IEin favor of a safer browser like Firefox, you may wish to remove thisextension with all due haste.
Unfortunately, Microsoft in their infinite wisdom has taken steps tomake the removal of this extension particularly difficult - open theAdd-ons window in Firefox, and you'll notice the Uninstall button nextto their extension is grayed out! Their reasoning, according toMicrosoft blogger Brad Abrams, is that the extension needed "support atthe machine level in order to enable the feature for all users on themachine," which, of course, is precisely the reason this add-on is badnews for all Firefox users.
Here's the bafflingly-convoluted procedure required to remove this garbage from Firefox:
1. Open Registry Editor (type regedit in the Start menu Search box in Vista/Windows 7, or in XP's Run window).
2. Expand the branches to the following key:
* On 32-bit systems: HKEY_LOCAL_MACHINE \ SOFTWARE \ Mozilla \ Firefox \ Extensions
* On x64 systems: HKEY_LOCAL_MACHINE \ SOFTWARE \ Wow6432Node \ Mozilla \ Firefox \ Extensions
3. Delete the value named {20a82645-c095-46ed-80e3-08825760534b} from the right pane.
4. Close the Registry Editor when you're done.
5. Open a new Firefox window, and in the address bar, type about:config and press Enter.
6. Type microsoftdotnet in the Filter field to quickly find the general.useragent.extra.microsoftdotnet setting.
7. Right-click general.useragent.extra.microsoftdotnet and select Reset.
8. Restart Firefox.
9. Open Windows Explorer, and navigate to %SYSTEMDRIVE%\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation.
10. Delete the DotNetAssistantExtension folder entirely.
11. Open the Add-ons window in Firefox to confirm that the Microsoft .NET Framework Assistant extension has been removed.
It will be a great day when PC users no longer have to waste this muchtime to protect themselves from those who write the software they use.(And if you're thinking, "Why not just use a Mac," may I remind you ofthe MobileMe junk recently installed on so many Windows machineswithout their owners' permission!) |
-
总评分: 学币 + 1
查看全部评分
|
狗仔卡
收藏
顶
踩
提升卡
置顶卡
变色卡
千斤顶
显身卡
]
