InstallShield Update Service

I noticed this thing on the Trusted list in the Software Explorer od Windows
Defender.

This tool makes it very very easy indeed to send non-anonymous data to be
farmed from your machine.
Look at the help file below
<http://helpnet.installshield.com/robo/projects/updateservice45/.htm#ProfilesNameProperty.htm>

Does this not count as a spyware api?

This may be a duplicate post, but I think my first one failed. Installshield
is not "trusted," it is "not yet classified":
ile Name: ISUSPM.exe
Display Name: InstallShield Update Service
Description: InstallShield Update Service Update Manager
Publisher: InstallShield Software Corporation
Digitally Signed By: NOT SIGNED
File Type: Application
Startup Value: C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
File Path: C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe
File Size: 221184
File Version: 3, 10, 100, 1146
Date Installed: 6/16/2004 6:03:26 AM
Startup Type: Registry: Local Machine
Location: Software\Microsoft\Windows\CurrentVersion\Run
Classification: Not yet classified
Ships with Operating System: No
SpyNet Voting: In Progress

Perhaps the InstallShield scheduler is "permitted" but I have it disabled
and do not know.
--
Regards,

Paul B. aka "OldRebel"


"anonymous" wrote:

> I noticed this thing on the Trusted list in the Software Explorer od Windows
> Defender.
>
> This tool makes it very very easy indeed to send non-anonymous data to be
> farmed from your machine.
> Look at the help file below
> <http://helpnet.installshield.com/robo/projects/updateservice45/.htm#ProfilesNameProperty.htm>
>
> Does this not count as a spyware api?
>

--
Mary J


"anonymous" wrote:

> I noticed this thing on the Trusted list in the Software Explorer od Windows
> Defender.
>
> This tool makes it very very easy indeed to send non-anonymous data to be
> farmed from your machine.
> Look at the help file below
> <http://helpnet.installshield.com/robo/projects/updateservice45/.htm#ProfilesNameProperty.htm>
>
> Does this not count as a spyware api?
>

Certain applications use the new InstallShield delivery packaging system to
install new programs and to maintain automatic patches/updates periodically
by checking for each package registered (like Microsoft Update).

You can go into InstallShield Manager and determine what programs on your
system are being managed.

Two I know of are Sonic and Corel PaintShop.

"anonymous" <anonymous@discussions.microsoft.com> wrote in message
news:58F540E6-3579-42BC-9609-1FB49591DFEE@microsoft.com...
>I noticed this thing on the Trusted list in the Software Explorer od
>Windows
> Defender.
>
> This tool makes it very very easy indeed to send non-anonymous data to be
> farmed from your machine.
> Look at the help file below
> <http://helpnet.installshield.com/robo/projects/updateservice45/.htm#ProfilesNameProperty.htm>
>
> Does this not count as a spyware api?
>

I got this InstallShield the last time my Corel WordPerfect updated. It does
check for updates for that program and itself. In Add/Remove Programs, it
says "This update cannot be removed" and they aren't kidding. For the last
year, the only "update" it has offered me is advertisements for new products
from Corel. I've noticed from time to time a lot of cpu activity which I
couldn't account for so I took a guess and disabled it in "Services" in
"Administrative Tools" and deleted it's files - or so I thought. No more
unaccountable cpu activity after that. So. . . Hmmm.

Unfortunately, I then noticed when I opened WordPerfect next time,
InstallShield re-installed itself back to normal. A no win situation.

"anonymous" wrote:

> I noticed this thing on the Trusted list in the Software Explorer od Windows
> Defender.
>
> This tool makes it very very easy indeed to send non-anonymous data to be
> farmed from your machine.
> Look at the help file below
> <http://helpnet.installshield.com/robo/projects/updateservice45/.htm#ProfilesNameProperty.htm>
>
> Does this not count as a spyware api?
>

Although I don`t have it on my system. I tried Googling and found this:

http://consumer.installshield.com/kb.asp?id=Q111006

From my investigations. seems this tool is generally used by the developers
of some software vendors to check for software updates as well as making for
trouble free installation of Windows based products as the technology
increases. There is also an uninstallation tool which can be downloaded to
uninstall. Anyway if you decide to investigate see what you think.

Stu

"OldRebel2" wrote:

> This may be a duplicate post, but I think my first one failed. Installshield
> is not "trusted," it is "not yet classified":
> ile Name: ISUSPM.exe
> Display Name: InstallShield Update Service
> Description: InstallShield Update Service Update Manager
> Publisher: InstallShield Software Corporation
> Digitally Signed By: NOT SIGNED
> File Type: Application
> Startup Value: C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
> File Path: C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe
> File Size: 221184
> File Version: 3, 10, 100, 1146
> Date Installed: 6/16/2004 6:03:26 AM
> Startup Type: Registry: Local Machine
> Location: Software\Microsoft\Windows\CurrentVersion\Run
> Classification: Not yet classified
> Ships with Operating System: No
> SpyNet Voting: In Progress
>
> Perhaps the InstallShield scheduler is "permitted" but I have it disabled
> and do not know.
> --
> Regards,
>
> Paul B. aka "OldRebel"
>
>
> "anonymous" wrote:
>
> > I noticed this thing on the Trusted list in the Software Explorer od Windows
> > Defender.
> >
> > This tool makes it very very easy indeed to send non-anonymous data to be
> > farmed from your machine.
> > Look at the help file below
> > <http://helpnet.installshield.com/robo/projects/updateservice45/.htm#ProfilesNameProperty.htm>
> >
> > Does this not count as a spyware api?
> >

You not only have to disable the Services portion but also delete the two
entries in the registry Run key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

If you don't, then next time the system reboots, they will start, and the
next time you start a supported application that has auto check for updates
on, it will put everything back.

"Hoolander" <Hoolander@discussions.microsoft.com> wrote in message
news:2FB442F2-D67E-4E2B-8375-013155337DAE@microsoft.com...
>I got this InstallShield the last time my Corel WordPerfect updated. It
>does
> check for updates for that program and itself. In Add/Remove Programs, it
> says "This update cannot be removed" and they aren't kidding. For the
> last
> year, the only "update" it has offered me is advertisements for new
> products
> from Corel. I've noticed from time to time a lot of cpu activity which I
> couldn't account for so I took a guess and disabled it in "Services" in
> "Administrative Tools" and deleted it's files - or so I thought. No more
> unaccountable cpu activity after that. So. . . Hmmm.
>
> Unfortunately, I then noticed when I opened WordPerfect next time,
> InstallShield re-installed itself back to normal. A no win situation.
>
> "anonymous" wrote:
>
>> I noticed this thing on the Trusted list in the Software Explorer od
>> Windows
>> Defender.
>>
>> This tool makes it very very easy indeed to send non-anonymous data to be
>> farmed from your machine.
>> Look at the help file below
>> <http://helpnet.installshield.com/robo/projects/updateservice45/.htm#ProfilesNameProperty.htm>
>>
>> Does this not count as a spyware api?
>>

I have old versions of Corel PaintShop and Word Perfect. They have been fully
updated and I guess InstallShield has nothing better to do than to offer me
upgrades to the newest versions. In any case, you can disable the
InstallShield programs from adding thems to startup by using WinPatrol free
or even Mike Lin's startup monitor:
http://www.winpatrol.com/winpatrol.html
http://www.mlin.net/StartupMonitor.shtml
I think these little programs that do not use a "whitelist" are more
effective at stopping startups that Defender might consider "permitted". Plus
they allow you to toggle them between enabled/disabled if you need to do that.
--
Regards,

Paul B. aka "OldRebel"


"Hoolander" wrote:

> I got this InstallShield the last time my Corel WordPerfect updated. It does
> check for updates for that program and itself. In Add/Remove Programs, it
> says "This update cannot be removed" and they aren't kidding. For the last
> year, the only "update" it has offered me is advertisements for new products
> from Corel. I've noticed from time to time a lot of cpu activity which I
> couldn't account for so I took a guess and disabled it in "Services" in
> "Administrative Tools" and deleted it's files - or so I thought. No more
> unaccountable cpu activity after that. So. . . Hmmm.
>
> Unfortunately, I then noticed when I opened WordPerfect next time,
> InstallShield re-installed itself back to normal. A no win situation.
>
> "anonymous" wrote:
>
> > I noticed this thing on the Trusted list in the Software Explorer od Windows
> > Defender.
> >
> > This tool makes it very very easy indeed to send non-anonymous data to be
> > farmed from your machine.
> > Look at the help file below
> > <http://helpnet.installshield.com/robo/projects/updateservice45/.htm#ProfilesNameProperty.htm>
> >
> > Does this not count as a spyware api?
> >