Tech: How do I get rid of Backweb Security Notice

Subject: Tech: How do I get rid Backweb Security Notice
From: katlaughing
Date: 04 Jul 07 - 01:12 AM

I understand this has something to do with HP automatic updates. Today when I rebooted a certificate came up which said "Backweb Security Notice, New Certificate for channel hp home server" and had a kind of murky looking certificate image. I told it "no" at which point it issued a threat of what I wouldn't be able to access if I didn't choose "yes!"

So...I found it is considered malware, but I have not found a way that I trust to remove it (not knowing much about any software I found to do so.)

I did a 4.5 hour AVG virus scan, Adaware and spybot. The virus scan came up clean and there were small bits the other two programs took care of.

how do I disable to auto updates or whatever to get rid of the above?

Thank you!!!

Subject: RE: Tech: How do I get rid Backweb of Security Notice
From: JohnInKansas
Date: 04 Jul 07 - 04:36 AM

Kat -

I haven't heard of this one, but there appears to be some explanation of what it is and fairly detailed removal instructions at I am not a Geek.

Note that I haven't "trusted" this site to the extent of trying out it's advice, although I've seen lots of referrals to it and it appears to be okay.

John

Subject: RE: Tech: How do I get rid Backweb of Security Not
From: katlaughing
Date: 04 Jul 07 - 10:42 AM

Thanks, John. That's a long list of files to delete! I've printed out the instructions and will look them over some more before I do anything. Their first link is defunct. Under "Destroy Autorun" it says to "delete the following key: HKEY-CURRENT_USER, etc." where do I find that key and is it safe to delete it?

Subject: RE: Tech: How do I get rid Backweb of Security Not
From: katlaughing
Date: 04 Jul 07 - 11:04 AM

Ummm, forget that last question, duh! *gives embarrassed shrug**

I did look for an uninstaller and found one for HP Updates, so did so despite dire warnings about my IE not working if I did. I haven't used nor had a current version of IE in years, so no worries.

Thanks, again, John.

Subject: RE: Tech: How do I get rid Backweb of Security Notice
From: JohnInKansas
Date: 04 Jul 07 - 11:33 AM

There seems to be a lot of confusion and speculation about this thing. It apparently is/was a valid program, used by HP and some others to check for updates periodically and to download them automatically. According to the people who make it, some AntiSpyware programs "mistakenly" reported it as spyware, and may have attempted to remove it. A removal attempt may have damaged the files, resulting in the "Security Warning" you're getting.

The statement, at the publishers of the program, Backweb indicates that nearly all AS program publishers now know that it's a real program and no longer try to remove it. If yours was "broken" before that happened, you may want to consider fixing it, rather than just getting rid of it.

One major company that reportedly uses it for updates is F-Secure, so if you've had their AV or other programs installed, it probably needs to be fixed, or you won't stay current. Quite likely, if you're using F-Secure AV, a remove and reinstall of that software should fix the Backweb installation so you won't get the error message.

If you have EVER used an HP printer or scanner, especially one of their "consumer class" el-cheapo ones and/or their multipurpose print/scan/fax etc abominations, that's also possibly where it came from, although I don't know whether this particular program is the one that HP uses for being obnoxious.

Especially for the "consumer class" stuff, HP just assumes that their stuff is the only thing you should have on your computer, and they just barge in and "automate" everything. It's "because you need it."

I've exchanged words with them on the subject, but I don't think they got the message.

The is NO WAY to make an HP "automatic update" program well-mannered, in my experience, and it's really difficult to get one turned off.

My HP Laserjet 1200, and my HP Deskjet 9650 (prints to 13x19") - neither of which is exactly a "consumer class" printer - don't have the problem. The only solution I found for "her" HP1315xi Multipurpose was to remove everything associated with it, lock the HP installation disk in some dark and inaccessible place, and the reinstall the printer from Microsoft default drivers.

The bottom line here is that the program that's giving you the error message IS NOT MALWARE. An AntiSpyware program may have detected that it uses some "deeply embedded functions" and thought it was spyware. An attempt by an AS program to remove it - especially by one that didn't know what it was - probably "broke the program" so that it now behaves like "something malfunctioning."

Not everything that doesn't work is malware. Some of it is HP-ware, Mickey-ware, and even Apple-ware that just happens to not work like it should.

In order to install the Backware update utility, the company that uses it must have a license. A license certificate has to appear in the appropriate file on each user machine. It's the manufacturer that provided it who has to be licensed, but if the file that certifies that the license is good has been deleted or damaged, the program won't run, and you get the error message every time it tries to run.

Check the link above, and also click the "Need more information" at the bottom of that page for some additional info on who uses the program. If you can figure out which program it came with, on your machine, reinstalling that program will probably fix the problem, since your "current and updated AntiMalware programs" aren't likely to mistake it for malware again.

John

Subject: RE: Tech: How do I get rid Backweb of Security Notice
From: JohnInKansas
Date: 04 Jul 07 - 11:37 AM

Kat -

ONE MORE TIME:

IE is an integral part of Windows. It MUST WORK and it MUST BE UP TO DATE even if you don't ever use it for browsing. It's there. You can't remove it. If it isn't current, it has holes in it that can permit your computer to be invaded.

John

Subject: RE: Tech: How do I get rid Backweb of Security Not
From: katlaughing
Date: 04 Jul 07 - 11:47 AM

Okay, so maybe i am mistaking an IE browser for something else? Sorry to sound so stupid about this. Everything is running well, regardless, after I uninstalled the HP updates. I will take a look at the link. Thanks, again!

Subject: RE: Tech: How do I get rid Backweb of Security Notice
From: JohnInKansas
Date: 04 Jul 07 - 09:17 PM

Internet Explorer - the browser - is built into Windows and cannot be removed. It is necessary that it be there for other Windows functions to work, including the Windows Explorer that you use to find files on your machine and that other programs use to find the bits and pieces that they need.

If you have upgraded to a newer version than the one that came with your Windows, the new version will appear in the Add/Remove software list in Control Panel, but "removing" it only reverts back to the version that was originally part of the installation. That version may of course have none of the patches and security fixes issued since your Windows was released. The original version cannot be removed, without "breaking" the whole Windows installation.

Since it is necessarily present, if it has vulnerabilities that are not patched, the whole machine is vulnerable to malware attacks via those vulnerabilities, whether or not you use IE for your web browsing.

If you receive automatic updates to Windows, IE critical patches should be automatically included, although it is necessary to have a recent version of IE installed, preferably the current version, since recent patches are built for the latest versions.

Since users of older Windows versions that don't qualify for Windows updates can use the newer versions of IE, you can visit a separate site to get the critical updates that apply only to IE, or to get upgraded versions of IE.

Either way, IE is installed, must be installed, cannot be removed, and must be kept up to date if you don't want holes in your machinery. If it's "broken" it needs to be fixed, even if you NEVER intend to use it for web browsing.

ESPECIALLY if you don't intend to use it for its web browser functions, I'd recommend installing the latest version (at least IE6 or IE7) since the latest versions "roll in" previous patches and will be the most "efficiently patchable" in the near-term future.

John

Subject: RE: Tech: How do I get rid of Backweb Security No
From: katlaughing
Date: 04 Jul 07 - 10:14 PM

Thanks, John. I will do so.

I refused some updates today until I could do some more checking as it wanted to run the "windows genuine advantage" which I read much about including pros and cons...some cons calling it nagware. The updates are still there; I just want to know more before I let it do its thing. I certainly don't like some of what I read about it and its snooping.