# Java **URL:** \ **Category:** Chatting over the Back Fence\ **Created:** [May 28, 2013, 10:54pm UTC](https://forums.suse.com/t/java/24008 "2013-05-28T22:54:07Z")\ **Posts on this page:** 16\ **Page:** 1
**Author:** ![System1](https://avatars.discourse-cdn.com/v4/letter/s/51bf81/32.png) [@System1](https://forums.suse.com/u/System1)\ **Post date:** [May 28, 2013, 10:54pm UTC](https://forums.suse.com/t/java/24008/1 "2013-05-28T22:54:07Z")
I have users that are incapable of unchecking the box for installing Ask Toolbar/McAfee AV when they are prompted to install Java updates. It’s not enough that Java is a complete security nightmare by itself, but do I have to endlessly uninstall these apps? Anyone with a solution to repackage Java to avoid this? ---
**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\ **Post date:** [May 28, 2013, 10:57pm UTC](https://forums.suse.com/t/java/24008/2 "2013-05-28T22:57:20Z")
GofBorg sounds like they ‘said’: [color=blue] > I have users that are incapable of unchecking the box for installing > Ask Toolbar/McAfee AV when they are prompted to install Java updates. > It’s not enough that Java is a complete security nightmare by itself, > but do I have to endlessly uninstall these apps? Anyone with a > solution to repackage Java to avoid this?[/color] So my response to GofBorg’s comment is… I’m sure someone would have said it anyway, so I’ll say it first…ZEN. 😉 – Stevo ---
**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\ **Post date:** [May 28, 2013, 11:21pm UTC](https://forums.suse.com/t/java/24008/3 "2013-05-28T23:21:53Z")
On Tue, 28 May 2013 19:54:07 GMT, GofBorg [GofBorg@no-mx.forums.opensuse.org](mailto:GofBorg@no-mx.forums.opensuse.org) wrote: [color=blue] > I have users that are incapable of unchecking the box for installing Ask > Toolbar/McAfee AV when they are prompted to install Java updates. It’s not > enough that Java is a complete security nightmare by itself, but do I have > to endlessly uninstall these apps? Anyone with a solution to repackage Java > to avoid this?[/color] Another option is Sophos Anti-virus. Sophos has an “Application Control Policy” that you can use to prohibit certain applications. All I had to do was select “McAfee Security Scan” and add it to the Blocked list and it cannot install here anymore. Took seconds to do. Of course that assumes you are already using Sophos as your AV product. I’m also looking into using Bundle Commander with ZCM to preconfigure how Java, Flash, etc get installed. That should hopefully remove the prompts for users to install/update the software. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\ **Post date:** [May 29, 2013, 12:22am UTC](https://forums.suse.com/t/java/24008/4 "2013-05-29T00:22:21Z")
Gosh… none of the RPMs I’ve installed have included those crappy bits and pieces. Good luck. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\ **Post date:** [May 29, 2013, 3:06am UTC](https://forums.suse.com/t/java/24008/5 "2013-05-29T03:06:02Z")
it’s easy to fix with or without zen (though zen makes it certainly easier) what you want to do is create a transform using something like orca and disable all the update related junk and manage the deployment of updates yourself if you run the install from the msi with an appropriate transform there is no more toolbar / mcaffee rubbish installed ## – gleach1 gleach1’s Profile: [http://forums.novell.com/member.php?userid=934](http://forums.novell.com/member.php?userid=934) View this thread: [http://forums.novell.com/showthread.php?t=467074](http://forums.novell.com/showthread.php?t=467074) ---
**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\ **Post date:** [May 29, 2013, 3:39am UTC](https://forums.suse.com/t/java/24008/6 "2013-05-29T03:39:45Z")
On 5/28/2013 3:54 PM, GofBorg wrote:[color=blue] > I have users that are incapable of unchecking the box for installing Ask > Toolbar/McAfee AV when they are prompted to install Java updates. It’s not > enough that Java is a complete security nightmare by itself, but do I have > to endlessly uninstall these apps? Anyone with a solution to repackage Java > to avoid this? > [/color] You can extract the MSI and deploy it like this or similar: [http://www.java.com/en/download/help/msi\_install.xml](http://www.java.com/en/download/help/msi_install.xml) [http://www.adminarsenal.com/admin-arsenal-blog/bid/58608/Install-Java-Silently](http://www.adminarsenal.com/admin-arsenal-blog/bid/58608/Install-Java-Silently) ---
**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\ **Post date:** [May 29, 2013, 4:07pm UTC](https://forums.suse.com/t/java/24008/7 "2013-05-29T16:07:42Z")
GofBorg wrote: [color=blue] > I have users that are incapable of unchecking the box for installing > Ask Toolbar/McAfee AV when they are prompted to install Java updates. > It’s not enough that Java is a complete security nightmare by itself, > but do I have to endlessly uninstall these apps? Anyone with a > solution to repackage Java to avoid this?[/color] Back when I used to manage an environment I would configure Java to not autoupdate and then I handled updates either completely manually or through ZCM (depended on the user). – Does this washcloth smell like chloroform? ---
**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\ **Post date:** [May 29, 2013, 6:24pm UTC](https://forums.suse.com/t/java/24008/8 "2013-05-29T18:24:45Z")
Yah, thing is, they seem to update it daily. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\ **Post date:** [May 29, 2013, 6:32pm UTC](https://forums.suse.com/t/java/24008/9 "2013-05-29T18:32:04Z")
> Another option is Sophos Anti-virus. Sophos has an “Application[color=blue] > Control Policy” that you can use to prohibit certain applications. All > I had to do was select “McAfee Security Scan” and add it to the > Blocked list and it cannot install here anymore. Took seconds to do. > Of course that assumes you are already using Sophos as your AV > product.[/color] This actually is the easiest solution. Is their AV engine more efficient these days? We used to be a customer until it turned into serious bloatware and crippled every PC I installed it on. Switched to F-Prot back around 2008, can’t even notice it running. Gives me an idea though, maybe I can script to check for it installed and run a silent uninstall…Hmmm. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\ **Post date:** [May 29, 2013, 7:50pm UTC](https://forums.suse.com/t/java/24008/10 "2013-05-29T19:50:41Z")
On Wed, 29 May 2013 15:32:04 GMT, GofBorg [GofBorg@no-mx.forums.opensuse.org](mailto:GofBorg@no-mx.forums.opensuse.org) wrote: [color=blue][color=green] > > Another option is Sophos Anti-virus. Sophos has an “Application > > Control Policy” that you can use to prohibit certain applications. All > > I had to do was select “McAfee Security Scan” and add it to the > > Blocked list and it cannot install here anymore. Took seconds to do. > > Of course that assumes you are already using Sophos as your AV > > product.[/color] > > This actually is the easiest solution. Is their AV engine more efficient > these days? We used to be a customer until it turned into serious bloatware > and crippled every PC I installed it on. Switched to F-Prot back around > 2008, can’t even notice it running. Gives me an idea though, maybe I can > script to check for it installed and run a silent uninstall…Hmmm.[/color] I’ve been running Sophos since about 2001. I never had problems with crippled PCs…maybe the settings I use. On-access scan works great. Some of my older PCs have a slight slowdown during a full system scan, but I only do that once a week. Ken ---
**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\ **Post date:** [May 29, 2013, 9:34pm UTC](https://forums.suse.com/t/java/24008/11 "2013-05-29T21:34:41Z")
GofBorg wrote: [color=blue] > Yah, thing is, they seem to update it daily.[/color] It’s not quite _that_ bad. 🙂 – Does this washcloth smell like chloroform? ---
**Author:** ![kgroneman](https://avatars.discourse-cdn.com/v4/letter/k/f1d935/32.png) [@kgroneman](https://forums.suse.com/u/kgroneman)\ **Post date:** [May 29, 2013, 9:58pm UTC](https://forums.suse.com/t/java/24008/12 "2013-05-29T21:58:14Z")
Hey Joseph Marton, [color=blue] > It’s not quite that bad.[/color] Almost. – Kim - 5/29/2013 12:58:09 PM ---
**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\ **Post date:** [May 30, 2013, 1:29am UTC](https://forums.suse.com/t/java/24008/13 "2013-05-30T01:29:30Z")
> I’ve been running Sophos since about 2001. I never had problems with[color=blue] > crippled PCs…maybe the settings I use. On-access scan works great. > Some of my older PCs have a slight slowdown during a full system scan, > but I only do that once a week.[/color] I was a big fan as well, but like I said performance went way downhill after one of their engine changes and never came back. So I had really no choice other than to abandon it. Really really awful on laptops. It may be you’re just used to it. Maybe they’ve resolved the issues, the inquiry I made they basically assigned as “won’t fix” so I assigned it to “won’t use”. I’ll download it again and revisit. Thanks for the suggestion. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\ **Post date:** [May 30, 2013, 3:26pm UTC](https://forums.suse.com/t/java/24008/14 "2013-05-30T15:26:33Z")
On Wed, 29 May 2013 22:29:30 GMT, GofBorg [GofBorg@no-mx.forums.opensuse.org](mailto:GofBorg@no-mx.forums.opensuse.org) wrote: [color=blue][color=green] > > I’ve been running Sophos since about 2001. I never had problems with > > crippled PCs…maybe the settings I use. On-access scan works great. > > Some of my older PCs have a slight slowdown during a full system scan, > > but I only do that once a week.[/color] > > I was a big fan as well, but like I said performance went way downhill > after one of their engine changes and never came back. So I had really no > choice other than to abandon it. Really really awful on laptops. It may > be you’re just used to it. Maybe they’ve resolved the issues, the inquiry I > made they basically assigned as “won’t fix” so I assigned it to “won’t use”. > I’ll download it again and revisit. Thanks for the suggestion.[/color] Did you notice the problem all the time or just during certain types of scans? Was there a specific amount of ram or cpu that it was taking? I’d like to compare against what I see here now. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\ **Post date:** [May 31, 2013, 8:27pm UTC](https://forums.suse.com/t/java/24008/15 "2013-05-31T20:27:28Z")
> Did you notice the problem all the time or just during certain types[color=blue] > of scans? Was there a specific amount of ram or cpu that it was > taking? I’d like to compare against what I see here now.[/color] Been too long ago to remember specifics now. Sorry. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\ **Post date:** [May 31, 2013, 9:24pm UTC](https://forums.suse.com/t/java/24008/16 "2013-05-31T21:24:24Z")
On Fri, 31 May 2013 17:27:28 GMT, GofBorg [GofBorg@no-mx.forums.opensuse.org](mailto:GofBorg@no-mx.forums.opensuse.org) wrote: [color=blue][color=green] > > Did you notice the problem all the time or just during certain types > > of scans? Was there a specific amount of ram or cpu that it was > > taking? I’d like to compare against what I see here now.[/color] > > Been too long ago to remember specifics now. Sorry.[/color] Ok…no problem.