Warning -- Firefox users please read!

[scaramonga]

How to disable the Firefox .NET Framework Assistant installed by MS.

In a recent update of the .NET framework Microsoft silently installs an extension to your Firefox browser if it is found on your system. This extension enables websites you visit with Firefox to silently install software on your computer, thus injecting the most serious flaw of Internet Explorer into Firefox.

Microsoft installs this extension in such a way that it cannot be removed directly by the user -- it is listed in the Extensions list but Uninstall is disabled.

This is not a bug -- this is the intended functionality of the Firefox extension, probably to enable Microsoft to install software on your machine when you visit their websites with Firefox instead of IE. This extension introduces a serious security vulnerability to Firefox. It should be removed immediately, using the instructions below.


Links removed by dmex
-This is not a vulnerability or anything to be concerned about, The Author of that article does not know what ClickOnce really does, please see page 3 for a detailed explanation-

 

[Ballistyx]

Thanks for the heads up with the info

 

[kodi]

I am running 7100rc x 64 bit and the extension uninstall is not grayed out and allowed me to remove it

 

[zigzag3143]

I am running 7100rc x 64 bit and the extension uninstall is not grayed out and allowed me to remove it

kodi
First welcome to SF. Tons of resources and really nice ppl. See scaramonga's post (#1) and use the removal instructions link. Also we can help you more if you fill in your "my system specs" in control panel

Good luck

Ken

 

[scaramonga]

I am running 7100rc x 64 bit and the extension uninstall is not grayed out and allowed me to remove it

Yes, but if you read the article:

Note that on Windows 7 and possibly some Versions of Vista the Uninstall button may actually be active for the .NET extension in the Firefox extensions list. However, using it does not appear to remove all the components of the extension. Since the vulnerability is so serious you should still manually check all the items on the Windows Annoyances check list to make sure they have all been removed.

 

[torrentg]

On x86 7201, Firefox 3.5 Beta 4, it was not greyed out and it let me uninstall normally. I then went to the annoyances site and did what they said.

I did not have this following part because I'm guessing I deleted it when uninstalling.

1. Type microsoftdotnet in the Filter field to quickly find the general.useragent.extra.microsoftdotnet setting.
2. Right-click general.useragent.extra.microsoftdotnet and select Reset.

To delete the DotNetAssistantExtension folder, I had to take ownership and also have Firefox closed.

This is horrible practice by Microsoft. We specifically go out of our way to not use IE and they have to do this to us? Overall, M$ is making good progress but this is not acceptable at all.

Thank you Scaramonga. I'd +1 rep again if I could.

 

[sandman]

Thanks for the heads up, and i to was able to uninstall the add-on with no issues as far as i can tell.

 

[scaramonga]

On x86 7201, Firefox 3.5 Beta 4, it was not greyed out and it let me uninstall normally. I then went to the annoyances site and did what they said.

I did not have this following part because I'm guessing I deleted it when uninstalling.

1. Type microsoftdotnet in the Filter field to quickly find the general.useragent.extra.microsoftdotnet setting.
2. Right-click general.useragent.extra.microsoftdotnet and select Reset.

To delete the DotNetAssistantExtension folder, I had to take ownership and also have Firefox closed.

This is horrible practice by Microsoft. We specifically go out of our way to not use IE and they have to do this to us? Overall, M$ is making good progress but this is not acceptable at all.

Thank you Scaramonga. I'd +1 rep again if I could.

Yup my friend, exactly the same procedure I had as well, but got there in the end

 

[Jacee]

I was able to add to rep ... thanks again scaramonga

 

[Orillion]

iam tring to delete %SYSTEMDRIVE%\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation folder but i wont allow it. i tried giving my user full control but that did not help. how do i transfer ownership of the folder to my user ?

 

[scaramonga]

Also make sure that no instances of Firefox are running before you delete, else it will fail.

 

[dmex]

iam tring to delete %SYSTEMDRIVE%\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation folder but i wont allow it. i tried giving my user full control but that did not help. how do i transfer ownership of the folder to my user ?

Hi Orillion,

If you delete the Windows Presentation Foundation folder then your computer will be unusable, Its a required system folder used by applications and deleting it will cause you great grief trying to run applications and use your computer in the future.

Steven

 

[swarfega]

Thanks, removed.

 

[Faruk]

Reset?

I have no idea why, but I cannot get past the "reset" part since I have no reset option... :sarc:

Is this wierd to more people, or is it just me?

 

[scaramonga]

I have no idea why, but I cannot get past the "reset" part since I have no reset option... :sarc:

Is this wierd to more people, or is it just me?

I never had steps 1. & 2. either....

1. Type microsoftdotnet in the Filter field to quickly find the general.useragent.extra.microsoftdotnet setting.
2. Right-click general.useragent.extra.microsoftdotnet and select Reset.

Just ignore if you don't have them and make sure to delete the DotNetAssistantExtension folder, and ONLY this folder!!

 

[Generator]

I've just read that if the uninstall button is greyed out, your running an old 'un-updated' .Net framework. They claim it was fixed with an .Net update late last month.

Security Fix - Microsoft Update Quietly Installs Firefox Extension
(read the comments)


Is it everyone NOT running latest build 7201 with problems with it greyed out by any chance?

 

[Faruk]

I never had steps 1. & 2. either....

1. Type microsoftdotnet in the Filter field to quickly find the general.useragent.extra.microsoftdotnet setting.
2. Right-click general.useragent.extra.microsoftdotnet and select Reset.

Just ignore if you don't have them and make sure to delete the DotNetAssistantExtension folder, and ONLY this folder!!

Will do, thanks for quick help

[Edit: Just deleted the folder, had some trouble with that too. It said I didn't have permission to delete it, so I downloaded and installed Unlocker 1.8.7 and deleted it with that. Now its all clear ]

 

[holo88]

1. Type microsoftdotnet in the Filter field to quickly find the general.useragent.extra.microsoftdotnet setting.
2. Right-click general.useragent.extra.microsoftdotnet and select Reset.

Just ignore if you don't have them and make sure to delete the DotNetAssistantExtension folder, and ONLY this folder!!

im using the beta firefox. it let me uninstall the extension. do i still have to do these steps? if so, where are these located, plz.

Microsoft, you sneaky snakes!

 

[scaramonga]

im using the beta firefox. it let me uninstall the extension. do i still have to do these steps? if so, where are these located, plz.

Microsoft, you sneaky snakes!

Right here buddy


Annoyances.org - Remove the Microsoft .NET Framework Assistant (ClickOnce) Firefox Extension

 

[dmex]

Before anyone starts removing the plugin , they should try using a ClickOnce application to see just how Hyped this report has been...

I deploy applications via ClickOnce and there is no issue here with the way its been designed or deployed by Microsoft, they have worked on ClickOnce for the last 10 years and it has had zero security vulnerability's in its entire history, basically because the Source-Code for the .net Framework is viewable on every system using a program called Reflector (.NET Reflector, class browser, analyzer and decompiler for .NET).

Reflector is able to show you the Source Code to any .net framework based executable or dll file including the source to Microsoft's own .net Framework files, bugs and issues are found very early and if someone tried releasing a virus using ClickOnce, anyone can see the source code to their application.

Heres a screenshot of the System.Net.Security.dll found in the C:\Windows\Microsoft.NET\framework\ folder:



Heres a screenshot of an application Im developing for Sevenforums:




You can test your Firefox ClickOnce support Here: (by James Dobson)
ClickOnceTester

Testing Manual here: (by James Dobson)
FFClickOnce Testing Manual

By design, You see this security warning when applications are deployed via ClickOnce and also when the .net framework runs the application with low-rights, in that mode applications can not prompt for Elevation, can not access your entire system or make dangerous system changes.




ClickOnce applications have to request security permissions to do anything particularly nasty to your system. Yet this is not foolproof. A poor security configuration on your machine or a bug in the .NET Framework (none in the last 9 years) that could allow an application to do more than it should.

ClickOnce is blocked from being able to access system components, unless you have changed file ownership and reset file permissions to system files, then even restricted applications like ClickOnce will have full access to your system.

Seriously, ClickOnce is not a security issue unless you have changed the default security of system files :sarc: