Feanor

Blogging since the First Age

How to remove Microsoft .NET Framework Assistant 1.0 from Firefox

, , , ,

Like everybody else one day I made a Windows Update and it installed something like 250M of .NET 3.5 "update". On top of it it also added an extension to Firefox, "Microsoft .NET Framework Assistant 1.0", without asking and with the "uninstall" option disabled. You can't uninstall the extension because it wasn't installed in the regular way. Here the description: http://msdn.microsoft.com/en-us/library/cc716877.aspx
Basically the extension is aimed to add Firefox the same "One Click" capability than IE when it comes to install/execute .NET applications from the Web. In case you want to get rid of this nice gift from Microsoft, here is the procedure: http://support.microsoft.com/kb/963707

Note that to remove the extension you need to edit the registry, edit Firefox about:config settings and then manually delete some directory/files from the disk.

This is bad. Actually MS knows that Firefox looks for the extensions in some locations. So via Windows Update Microsoft copies their stuff (linked to whatever else on the HD) so when you start Firefox it loads that stuff as "extension", despite you haven't actually installed as real extension neither you have the usual control over it as regular FF extension. I guess guys at Mozilla need to work around this.

Spring timeWhat I have been doing lately

Comments

Aux Wednesday, April 15, 2009 6:50:59 PM

Is it "extension" or "nsplugin"?

Lorenzo CelsiLorenzoCelsi Wednesday, April 15, 2009 6:56:59 PM

It is listed in Firefox as extension. I don't know the technical details of it. The MS page I linked above says:
"The Windows Presentation Foundation (WPF) Plug-in for Firefox and the .NET Framework Assistant enable XAML browser applications (XBAPs), loose XAML, and ClickOnce applications to work with the Firefox browser."

Aux Wednesday, April 15, 2009 8:13:08 PM

Well... If it is extension, then it is a security issue with Firefox that other software can put anything and install it silently without user notice. If it is a Netscape-style plug in, then everything is OK.

Lorenzo CelsiLorenzoCelsi Wednesday, April 15, 2009 8:22:30 PM

It is not an "or" it is an "and". There is both the plugin (listed among plugins) and the extension (listed among estensions). They seem to have different roles, since the extension only enables the "one click" function in FF. I am not sure the plugin gets installed together with the extension, I did not notice if the plugin comes with IE8 and the extension with .NET 3.5 update or both with .NET.

I don't know enough to tell what are the possible security risks related to the plugin and/or the extension. The final goal of both is to download and execute .NET "smart clients" that are the MS version of Flash RIA apps. How "sandboxed" those apps can be... I don't know. Generally speaking I really do not understand why everybody is pushing this sort of things on the Web.

On a side note, I find a little annoying that a Windows update installs stuff in Firefox without asking, that I can't remove the installed stuff (without hacking the system) and once removed in case I want to install stuff back again I must re-install the whole .NET 3.5 package.

Aux Thursday, April 16, 2009 7:14:28 AM

Yep, installing something without my own expressed will is a bad practice!

Uwe Vogt [aka JaDa]JaDa Thursday, April 23, 2009 12:37:57 PM

Microsoft is always a wonderland full of surprises smile

Write a comment

New comments have been disabled for this post.

June 2012
M T W T F S S
May 2012July 2012
1 2 3
4 5 6 7 8 9 10
11 12 13 14 15 16 17
18 19 20 21 22 23 24
25 26 27 28 29 30