For those of you who use FireFox


Recommended Posts

Remove the Microsoft .NET Framework Assistant (ClickOnce) Firefox Extension

Intended For

Windows 2000

Windows 7

Windows XP

Windows Vista

The Microsoft .NET Framework 3.5 Service Pack 1 update, pushed through the Windows Update service to all recent editions of Windows in February 2009, installs the Microsoft .NET Framework Assistant firefox extension without asking your permission.

This update adds to Firefox one of the most dangerous vulnerabilities present in all versions of Internet Explorer: the ability for websites to easily and quietly install software on your PC. Since this design flaw is one of the reasons you may've originally choosen to abandon IE in favor of a safer browser like Firefox, you may wish to remove this extension with all due haste.

Unfortunately, Microsoft in their infinite wisdom has taken steps to make the removal of this extension particularly difficult - open the Add-ons window in Firefox, and you'll notice the Uninstall button next to their extension is grayed out! Their reasoning, according to Microsoft blogger Brad Abrams, is that the extension needed "support at the machine level in order to enable the feature for all users on the machine," which, of course, is precisely the reason this add-on is bad news for all Firefox users.

Here's the bafflingly-convoluted procedure required to remove this garbage from Firefox:

Open Registry Editor (type regedit in the Start menu Search box in Vista/Windows 7, or in XP's Run window).

Expand the branches to the following key:

On 32-bit systems: HKEY_LOCAL_MACHINE \ SOFTWARE \ Mozilla \ Firefox \ Extensions

On x64 systems: HKEY_LOCAL_MACHINE \ SOFTWARE \ Wow6432Node \ Mozilla \ Firefox \ Extensions

Delete the value named {20a82645-c095-46ed-80e3-08825760534b} from the right pane.

Close the Registry Editor when you're done.

Open a new Firefox window, and in the address bar, type about:config and press Enter.

Type microsoftdotnet in the Filter field to quickly find the general.useragent.extra.microsoftdotnet setting.

Right-click general.useragent.extra.microsoftdotnet and select Reset.

Restart Firefox.

Open Windows Explorer, and navigate to %SYSTEMDRIVE%\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation.

Delete the DotNetAssistantExtension folder entirely.

Open the Add-ons window in Firefox to confirm that the Microsoft .NET Framework Assistant extension has been removed.

It will be a great day when PC users no longer have to waste this much time to protect themselves from those who write the software they use. (And if you're thinking, "Why not just use a Mac," may I remind you of the MobileMe junk recently installed on so many Windows machines without their owners' permission!)

Credits go to Annoyances.org for this eye opening security fix.

Link to comment
https://www.neowin.net/forum/topic/838064-for-those-of-you-who-use-firefox/
Share on other sites

old news. and mozilla have rolled out an update which disables it automatically. anybody running the latest version of firefox would have seen a prompt on screen telling them this.

https://www.neowin.net/forum/index.php?showtopic=834612

Just got it myself ...

capture47.jpg

  • 2 weeks later...
Thanks for the notification ... !!!

all i can say is that I'm shocked to know this.

Firefox offers the most secure browsing of the www in my opinion and i wouldn't want any extension (addon/plugin) to change that

so thanks again. ;)

hehe, yeah sure.

maybe when they add built in sandboxing/safe mode like a certain other major browser, or come close to catching up to Opera on Secunia.

  • 4 weeks later...
  • 2 weeks later...
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • I have a Motorola, one of the lower end ones, it works fine. It is possible to get rid of the Gemini app and also to disable googles assistant , but A.i is still apps. I try to avoid all LLM A.I, is i can, I use no Ai duck duck go.
    • Free Software Foundation Europe pushes EU to force Google to allow AI uninstalls on Android by Paul Hill Credit: Pexels Users should be able to fully uninstall AI-based features from Android devices and be able to access interoperability functions, free from Google’s verification requirements, the European Commission has heard as part of an Android interoperability consultation under the Digital Markets Act. These measures were proposed by the Free Software Foundation Europe (FSFE) last week when it submitted its documentation. The FSFE noted that Google had started silently installing AI models without telling users. It noted that the EU’s DMA requires companies like Google to allow users to uninstall pre-loaded software from their devices, but in the case of the AI models Google is installing, they reinstall if you delete them, contravening the DMA. To get Google back under control, the FSFE has told the European Commission that there needs to be improvements within the Android Open Source Project (AOSP). First, it said that users should be able to fully remove pre-loaded AI components from their devices, with companies being prohibited from silently reinstalling or reactivating them. Second, access to Android interoperability features should not be contingent on registration, authorization, or contractual relationships with Google. This pertains to Google’s attempt to force developers to register with Google, even to publish apps to alternative app stores like F-Droid. Discussing its submission, Lucas Lasota, FSFE Legal Programme Manager, said: Google is planning to roll out its Android Developer Certification in September 2026. This will force every Android app developer to register with Google before their software can be installed on certified Android devices, but it should affect those who have removed Google Apps from their device. The program is controversial because it entails the signing of contracts and payment of account fees to Google, as well as the handing over of the identities of developers. It said: The FSFE said that if the Commission’s draft measures remain unchanged, then Google will be allowed to make developers verify their identity. The FSFE believes that asking developers to register is contrary to the text and spirit of the law. In summary, the FSFE has told the Commission that no developer should need a Google account, a Play Store presence, or any agreement with Google to access Android’s interoperability features.
  • Recent Achievements

    • Conversation Starter
      sumytbe earned a badge
      Conversation Starter
    • One Year In
      B4dM1k3 earned a badge
      One Year In
    • One Year In
      DarkWun earned a badge
      One Year In
    • Dedicated
      Almohandis earned a badge
      Dedicated
    • Dedicated
      JuvenileDelinquent earned a badge
      Dedicated
  • Popular Contributors

    1. 1
      +primortal
      519
    2. 2
      +Edouard
      188
    3. 3
      PsYcHoKiLLa
      87
    4. 4
      Michael Scrip
      81
    5. 5
      Steven P.
      72
  • Tell a friend

    Love Neowin? Tell a friend!