Re: McAfee AV software bundled with Jave updates

["Fields, Kimberly" <kfield3 () AMERIGROUPCORP COM>]

May I ask what version of Java are you updating to?  I just updated my client to the latest version with no problems.

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Tonkin, 
Derek K.
Sent: Thursday, July 30, 2009 3:07 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] McAfee AV software bundled with Jave updates

I just dealt with this on a staff members computer yesterday.  We try to encourage people to keep things up to date but 
I'm considering changing my stance on Java.  They have historically included OpenOffice.org or a Yahoo or Google 
toolbar which also defaulted to being checked.  This is even worse though and will cause our helpdesk a fair amount of 
pain.

It doesn't really surprise me that they did it but it certainly does disappoint me in both Sun and McAfee.

-------------Baylor University-------------
Derek Tonkin
Information Security Analyst
Information Technology Services - Security
derek_tonkin () baylor edu        254-710-7061
---------------Sic 'em Bears---------------

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Gary 
Flynn
Sent: Thursday, July 30, 2009 1:52 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] McAfee AV software bundled with Jave updates

When the automatic update mechanism included with Java
kicks off and you tell it to update, the setup box now
comes up with an option to install a 30 day version of 
McAfee anti virus software. The option is checked by 
default so anyone that updates their Java installation 
without paying close attention will also install McAfee.

Has anyone researched this already enough to have found
a registry setting or something else so at least
the default action will be NOT to install the software?

I can't believe they did this.



Gary Flynn
Security Engineer
James Madison University
www.jmu.edu/computing/security

_____________________________________________________________________

Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended 
recipient(s) and may include 
AMERIGROUP member(s) information that is legally privileged. Any unauthorized review, use, disclosure or distribution 
is prohibited. 
If you are not the intended recipient, please contact the sender by reply e-mail and destroy copies of the original 
message.
_____________________________________________________________________