Firefox Plugin installed without permission.

Hmm, checked my Firefox and I show the plugin installed on July 10th. I disabled the plugin and restarted Firefox. It may be coincidence, but I've been noticing that Firefox startup is really significantly slower lately, and after disabling the plugin Firefox starts up almost immediately instead of taking up to several minutes to just load my startup page (which is a very basic html list of links saved on my desktop). Not impressed that Firefox permitted it to be installed without notification, or that SOE installed it without asking.

Verified point of install.
My wife had not updated her EQ2 in the last 3 weeks. The last day she had played was the 3rd of this month.
Searched file system for "npsoe.dll" and found nothing.
I loaded Firefox and verified that she did not have the SOE Web Installer Plugin installed. While I had Firefox still open (CNN--her homepage, and nowhere else in that session), I booted the EQ2 Updater. It downloaded 145MB, altered and created a handful of files, then got stuck on preloading assets. It stayed stuck until I closed Firefox and the updater started preloading assets again. I suspect this "preloading assets" is the moment that the plug-in is installed as Firefox files cannot be changed while Firefox is running.
Before the EQ2 updater had finished, I re-opened Firefox...and sure enough, the SOE Web Installer is installed on her machine now.

My latest findings are that even if you do uninstall it will be enabled again when you run the Launchpad even though it will show no files to update. If you do disable the plugin it will not enable again when you patch.
I have not had Firefox hang or be slower because of this plugin. The following are the 120 registry changes made when the SOE plugin is installed.
----------------------------------
Keys added:60
----------------------------------
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Code Store Database\Distribution Units\{000F1EA4-5E08-4564-A29B-29076F63A37A}
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Code Store Database\Distribution Units\{000F1EA4-5E08-4564-A29B-29076F63A37A}\Contains
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Code Store Database\Distribution Units\{000F1EA4-5E08-4564-A29B-29076F63A37A}\Contains\Files
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Code Store Database\Distribution Units\{000F1EA4-5E08-4564-A29B-29076F63A37A}\Contains\FilesFlags
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Code Store Database\Distribution Units\{000F1EA4-5E08-4564-A29B-29076F63A37A}\Contains\FilesFlags\npsoe.dll
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Code Store Database\Distribution Units\{000F1EA4-5E08-4564-A29B-29076F63A37A}\InstalledVersion
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\FirstFolder
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clonewarsadventures.com
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\freerealms.com
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\soe.com
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\sony.com
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/Users/Your User Name/AppData/LocalLow/Sony Online Entertainment/npsoe.dll
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\TypeLib\{000F1EA4-5E08-4564-A29B-29076F63A37A}
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\TypeLib\{000F1EA4-5E08-4564-A29B-29076F63A37A}\1.0
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\TypeLib\{000F1EA4-5E08-4564-A29B-29076F63A37A}\1.0\0
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\TypeLib\{000F1EA4-5E08-4564-A29B-29076F63A37A}\1.0\0\win32
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\TypeLib\{000F1EA4-5E08-4564-A29B-29076F63A37A}\1.0\FLAGS
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\TypeLib\{000F1EA4-5E08-4564-A29B-29076F63A37A}\1.0\HELPDIR
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\MIME\Database\Content Type\application/vnd.sony.soe
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\Control
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\DefaultIcon
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\EnableFullPage
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\InprocServer32
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\MiscStatus
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\MiscStatus\1
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\ProgID
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\Programmable
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\ToolboxBitmap32
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\TypeLib
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\Version
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\VersionIndependentProgID
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\Interface\{000F1EA4-5E08-4564-A29B-29076F63A37A}
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\Interface\{000F1EA4-5E08-4564-A29B-29076F63A37A}\TypeLib
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\soex.SOEWebInstallerctl
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\soex.SOEWebInstallerctl\CLSID
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\soex.SOEWebInstallerctl\CurVer
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\soex.SOEWebInstallerctl.1
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\soex.SOEWebInstallerctl.1\CLSID
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\MIME\Database\Content Type\application/vnd.sony.soe
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\Control
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\DefaultIcon
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\EnableFullPage
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\InprocServer32
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\MiscStatus
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\MiscStatus\1
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\ProgID
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\Programmable
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\ToolboxBitmap32
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\TypeLib
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\Version
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\VersionIndependentProgID
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\Interface\{000F1EA4-5E08-4564-A29B-29076F63A37A}
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\Interface\{000F1EA4-5E08-4564-A29B-29076F63A37A}\TypeLib
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\soex.SOEWebInstallerctl
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\soex.SOEWebInstallerctl\CLSID
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\soex.SOEWebInstallerctl\CurVer
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\soex.SOEWebInstallerctl.1
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\soex.SOEWebInstallerctl.1\CLSID

And the rest....
----------------------------------
Values added:60
----------------------------------
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Code Store Database\Distribution Units\{000F1EA4-5E08-4564-A29B-29076F63A37A}\Contains\FilesFlags\npsoe.dll\RedirectToHKCU: 0x00000001
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Code Store Database\Distribution Units\{000F1EA4-5E08-4564-A29B-29076F63A37A}\Contains\Files\C:\Users\Your User Name\AppData\LocalLow\Sony Online Entertainment\npsoe.dll: (NULL!)
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Code Store Database\Distribution Units\{000F1EA4-5E08-4564-A29B-29076F63A37A}\InstalledVersion\: "1,0,3,171"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Code Store Database\Distribution Units\{000F1EA4-5E08-4564-A29B-29076F63A37A}\SystemComponent: 0x00000000
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Code Store Database\Distribution Units\{000F1EA4-5E08-4564-A29B-29076F63A37A}\Installer: "MSICD"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\FirstFolder\0: 45 00 3A 00 5C 00 54 00 65 00 6D 00 70 00 5C 00 52 00 65 00 67 00 73 00 68 00 6F 00 74 00 5F 00 31 00 2E 00 38 00 2E 00 33 00 5F 00 72 00 38 00 39 00 5F 00 78 00 36 00 34 00 5F 00 57 00 44 00 4B 00 5C 00 52 00 65 00 67 00 73 00 68 00 6F 00 74 00 2E 00 65 00 78 00 65 00 00 00 45 00 3A 00 5C 00 54 00 65 00 6D 00 70 00 5C 00 00 00
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\FirstFolder\MRUListEx: 00 00 00 00 FF FF FF FF
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\sony.com\*: 0x00000002
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\soe.com\*: 0x00000002
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\freerealms.com\*: 0x00000002
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clonewarsadventures.com\*: 0x00000002
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/Users/Your User Name/AppData/LocalLow/Sony Online Entertainment/npsoe.dll\.Owner: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/Users/Your User Name/AppData/LocalLow/Sony Online Entertainment/npsoe.dll\{000F1EA4-5E08-4564-A29B-29076F63A37A}: (NULL!)
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Users\Your User Name\AppData\LocalLow\Sony Online Entertainment\npsoe.dll: 0x00000001
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\TypeLib\{000F1EA4-5E08-4564-A29B-29076F63A37A}\1.0\0\win32\: "C:\Users\Your User Name\AppData\LocalLow\Sony Online Entertainment\npsoe.dll"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\TypeLib\{000F1EA4-5E08-4564-A29B-29076F63A37A}\1.0\HELPDIR\: (NULL!)
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\TypeLib\{000F1EA4-5E08-4564-A29B-29076F63A37A}\1.0\FLAGS\: "0"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\TypeLib\{000F1EA4-5E08-4564-A29B-29076F63A37A}\1.0\: "SOEWebInstaller 1.0 Type Library"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\MIME\Database\Content Type\application/vnd.sony.soe\CLSID: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\MIME\Database\Content Type\application/vnd.sony.soe\Extension: ".soe"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\MiscStatus\1\: "131473"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\VersionIndependentProgID\: "soex.SOEWebInstallerctl"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\Version\: "1.0.3.171"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\TypeLib\: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\ToolboxBitmap32\: "C:\Users\Your User Name\AppData\LocalLow\Sony Online Entertainment\npsoe.dll, 4120"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\ProgID\: "soex.SOEWebInstallerctl.1"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\MiscStatus\: "0"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\InprocServer32\: "C:\Users\Your User Name\AppData\LocalLow\Sony Online Entertainment\npsoe.dll"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\InprocServer32\ThreadingModel: "Apartment"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\DefaultIcon\: "C:\Users\Your User Name\AppData\LocalLow\Sony Online Entertainment\npsoe.dll,-1"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\: "SOE Web Installer"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\Interface\{000F1EA4-5E08-4564-A29B-29076F63A37A}\TypeLib\: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\Interface\{000F1EA4-5E08-4564-A29B-29076F63A37A}\TypeLib\Version: "1.0"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\Wow6432Node\Interface\{000F1EA4-5E08-4564-A29B-29076F63A37A}\: "ISOEWebInstallerctl"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\soex.SOEWebInstallerctl\CurVer\: "soex.SOEWebInstallerctl.1"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\soex.SOEWebInstallerctl\CLSID\: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\soex.SOEWebInstallerctl\: "Sony Online Entertainment Package"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\soex.SOEWebInstallerctl.1\CLSID\: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001\Software\Classes\soex.SOEWebInstallerctl.1\: "Sony Online Entertainment Package"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\MIME\Database\Content Type\application/vnd.sony.soe\CLSID: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\MIME\Database\Content Type\application/vnd.sony.soe\Extension: ".soe"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\MiscStatus\1\: "131473"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\VersionIndependentProgID\: "soex.SOEWebInstallerctl"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\Version\: "1.0.3.171"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\TypeLib\: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\ToolboxBitmap32\: "C:\Users\Your User Name\AppData\LocalLow\Sony Online Entertainment\npsoe.dll, 4120"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\ProgID\: "soex.SOEWebInstallerctl.1"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\MiscStatus\: "0"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\InprocServer32\: "C:\Users\Your User Name\AppData\LocalLow\Sony Online Entertainment\npsoe.dll"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\InprocServer32\ThreadingModel: "Apartment"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\DefaultIcon\: "C:\Users\Your User Name\AppData\LocalLow\Sony Online Entertainment\npsoe.dll,-1"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\CLSID\{000F1EA4-5E08-4564-A29B-29076F63A37A}\: "SOE Web Installer"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\Interface\{000F1EA4-5E08-4564-A29B-29076F63A37A}\TypeLib\: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\Interface\{000F1EA4-5E08-4564-A29B-29076F63A37A}\TypeLib\Version: "1.0"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\Wow6432Node\Interface\{000F1EA4-5E08-4564-A29B-29076F63A37A}\: "ISOEWebInstallerctl"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\soex.SOEWebInstallerctl\CurVer\: "soex.SOEWebInstallerctl.1"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\soex.SOEWebInstallerctl\CLSID\: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\soex.SOEWebInstallerctl\: "Sony Online Entertainment Package"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\soex.SOEWebInstallerctl.1\CLSID\: "{000F1EA4-5E08-4564-A29B-29076F63A37A}"
HKU\S-1-5-21-1846214994-3805040422-1747148007-1001_Classes\soex.SOEWebInstallerctl.1\: "Sony Online Entertainment Package"

Digging around, I found this article that discusses the issue of 3rd party applications installing unsolicited plug-ins, extensions and add-ons in Firefox.
http://news.softpedia.com/news/Mozi...on-192843.shtml
Unfortuantely, that article is from April 4, 2011. Firefox has been upgraded several times since that date...and nothing has been done.
It is NOT cool for companies like SOE to use the very same tactics that malware distibutors use (perhaps I have that backwards). At some point, the user can longer tell the difference between the two.
Also, this plug-in is NOT confined to just Firefox. Opera, Chrome, Firefox and IE are all getting it.

Edit: Additional gripe.
My little test to verify that SOE was installing the plug-in during game updates...broke the update. Game doesn't work now, nor will the "check files" function fix it. So, having a browser open while trying to update the game is enough to break the update. Lame.
So now, even though I'll never have a use for the plug-in I have to do a complete re-install because it was shoved down my throat anyway. Lovely. I think I'll wait for a response from a SOE rep, here on the forums, before I re-install. Otherwise, it's looking like an uninstall.

I don't share the OP's distrust of this plugin and honestly think its harmless. I already mentioned in can be disabled in Firefox and will never be updated or enabled again unless you choose to do so. The blame rests fully with Firefox as the security procedures for unattended Plugins is the fault of Mozzila.
I also said this plugin has been around since 2009 and I believe its used to help with UAC in windows and installation security problems. The default install path of the game has changed a few times over the years because of security problems.
More info of the origins of this plugin is here.
http://forums.station.sony.com/stat..._id=11500014128

Lamatu wrote:

That is nice to know--they tried this before, people complained and their answer is to JAM IT DOWN OUR THROAT.
This is a Rootkit, folks.
It bypasses all administrative rights in the name of updates and uses a browser so that you cannot firewall the updater without also losing browsing access (something they figured out nobody will do without). I've had several people (friends that code for a living) looking at the registry entries that you so kindly posted (as well as their own installs, in some cases) and they all agree--they achieve exactly what I just described. Root-level administrative rights.
That being said, unless you are willing to sandbox everything Sony, they cannot be trusted. I should have learned my lesson back when Sony/BMG rootkited my old XP machine. But I have learned a very valuable lesson--NEVER give a Corporation a second chance.
Our entire group is canceling. 18 accounts in all, gone. We're all done with MMOs, Sony. And, YES, I will be telling everyone I know, as well as posting on tech forums about this garbage.
And for those of you that haven't figured it out yet, Firefox is on-board with all of this. They've known for over two years that allowing 3rd party plug-ins without vetting them first was a huge security flaw. Yet, about an hour ago I get an "advert" tab in Firefox upon boot that extolls the virtues of 3rd party plug-ins and add-ons and presses you to update them often. Mozilla has sold out to the people with the most money, I guess.
Rootkit me once, Sony--shame on you. Rootkit me twice, shame on me. It will never happen again.

Absolutely typical.

The EQ2 Uninstaller didn't remove a single file. I now have to spend hours rummaging through my HD find all the crap they spread all over.

Fabulous. Never again....

BUG you may wanna try out http://waterfoxproject.org/ as thats a 64bit browser variant of Firefox.
All Firefox extensions work with it and the only plugins that can be installed are 64bit which only Flash, Silverlight and Java have.
It imports all your Firefox stuff on install and the only thing I had to configure was turn off harware acceleration under Advanced to make the fonts looks better.
Should also mention if anyone installs this and keeps their Firefox install you don't wanna keep one or the other browser open when you launch the other.

Interesting. I disabled the SOE plugin.. and lost all streaming video feeds. Shockwave You Tube etc. It wasn't that they were inoperable, they were gone.
No frame, no box, a large blank space. Re-Enable SOE plugin.. and they all worked again.
I have no idea how these things work. I have 2 plug ins for Firefox, Shockwave and SOE.

A statement from SOE would be appreciated.

1. Exactly what is the plugin being installed? What does it do? Why is it being installed?
   
2. Why is this plugin being installed via stealth means? (no user input / verification)
   
3. Why is disabling this plugin having negative effects on some people? (as per Lasai's post just above)
   
4. Why does uninstalling EQ2 leave this SOE plugin installed on our systems? (as per Bug's post above)

I am quite concerned about the complete lack of communication given by SOE, regarding gigabytes of crashlog data being put in a directory (C:\crash) I did not approve the creation of. Nor would I allocate that drive as the destination of crashlogs if I was to approve the process and select an application.

Now I find out SOE is trying to modify my web browser, without my permission.

I want answers.

Bug wrote:

First off, I disbelieve you when you say "18 accounts". Secondly, I sincerely believe you are massively overreacting. Thirdly, Firefox has nothing to do with you having malware on your system.

Lasai wrote:

I disabled mine and it all still works.

I've been playing with it. It effects shockwave.. the other plug in I have. Sometimes disabling SOE plugin seems to knock both out. Im on a shaky rural broadband IP.. odd things happen.
The Shockwave Plug In is always showing as enabled.
I have a pretty strong black list on NoScript.. dunno if that matters.
Side effects aside.. I still want to know what this is, what dependancies, why it is there.
I'm kinda miffed at Mozilla atm.

Lasai wrote:

It's not the SOE plugin causing your problems. Secondly, other companies such as Skype, NVIDIA, and Apple and many others also silently install plugins (including Microsoft) into both Firefox and Chrome.

Now to answer your question. Why is it there? SOE, as you may already know, recently purchased Gaikai; an online cloud gaming service similar to OnLive. Since SOE already has browser based games they may be intending to release a version of EQ2 that either runs from the browser or through the cloud via Gaikai. The plugin would certainly allow it as it's what they use for Star Wars the Clone Wars and Free Realms.

Thanks for bringing this to our attention. A change to our launcher package was inadvertently published which caused this to happen, which we're correcting. The DLL in question is used to allow the launch of applications from a web page (the same DLL we use for Free Realms and Clone Wars) but isn't necessary for EQ2. It will not invoke on its own, and does not run persistently on your machine. It is only capable of specific logic to invoke our games and will not run other programs.
Because this was an accidental inclusion, it doesn't have the accompanying uninstall logic. However, it is entirely inactive if you disable it (and won't affect your ability to play EQ2 at all). If you'd like to completely remove it, there are instructions for Firefox here: http://support.mozilla.org/en-US/kb...alling-a-plugin or you can call our CS folks and they will guide you through it.
Sorry for the inconvenience, and again, thanks for bringing it up.

Thank you for the reply.

Dexella wrote:

You've GOT to be kidding me. Do you seriously think that I am concerned about the Firefox plug-in after determining that it was just part of a rootkit? This is no longer about the plug-in, but rather a rootkit that bypassed UAC entirely and made changes to numerous system files.
An accident? And you send me off to someone else to tell me how to remove it? Sorry, not letting you pass the buck on this.
First of all, this rootkit added 4 of your domains to my Trusted Zone without permission (freerealms.com, clonewarsadventures.com, soe.com and sony.com), and it did so in 6 different locations in my registry.
Uninstallation of the GAME deleted the pinned shortcut on my taskbar--nothing else. Over 16GB of data and rootkit left behind--ALL of it fully functional. I could directly run EQ2.exe from the install directory after getting a message stating that EQ2 had been uninstalled.
Well over a hundred registry entries that had to be hand-deleted (removed the Firefox plugin, at least).
Combofix (a commonly-used rootkit removal tool) crashes the computer into a reboot when it runs--only if EQ2 is installed. On the machine that I cleaned of all your garbage, it runs perfectly. Explain THAT. As long as EQ2 is installed on the machine, running Combofix and GMER (another rootkit removal tool) results in a crash/restart--this is a common tactic used to prevent users from locating, and thus removing, rootkits.

Here is what I've done so far, once I realized what you guys were up to.
1. Hand cleaned this machine, and verified that no rootkit remains. Tested all available rootkit removal tools and found they all work and report no rootkit. Although I got a clean report I seriously doubt I found everything--I more then likely found just enough to break the rootkit to the point it is no longer reconizable as being one.
2. Updated my wifes version of EQ2 (see above test in previous post) to verify that EQ2 was installing the plug-in.
3. Imaged (copied) my wifes entire hard-drive to another hard-drive. Removed this image drive from computer (so you guys can't alter it).
4. Attempted to run numerous rootkit diagnotic tools--only one ran properly. Hijackthis ran and reported the trusted zone changes but failed to access many of the files it tried to access. All other diagnotic tools crashed machine to reboot.
5. Contacted a private computer forensic lab about diagnosing a drive, saying nothing more then "I think I have a rootkit and want to know what it is doing and who installed it." Made appointment to bring imaged drive to office tommorrow.
6. Wrote letter and email to Washington State Attorney's Office--will send letter by registered mail once I have forensics report on the imaged drive in-hand.

So, as you can see, I'm quite angry--so much so that I am willing to spend a significant amount of my own cash to see that this doesn't get white-washed away.

Good day.

*Any legal discussion should be sent to the Legal Department as suggested in the forum guidelines, thank you!*

I had a look at it myself last night and was able to determine that it is for the most part harmless, it does however set itself in trusted zones and register it's plugin dll.
Unlike Bug I was able to run ComboFIx and a couple of other tools fine and found no Rootkits.
I found that even if you uninstalled the plugin as soon as you run the Launcher, it reinstates itself. So if you want to keep it off your system for good, you'll have to set ownership and permissions to the registry Key entries to the trusted zones and whatever other place you don't want it going to. As the Sony Installer is probably using the "Trusted" installer account or system account.
If you find anything Bug, let us know. Will be interested if you are able to do so as I'm not gonna break my ToS and disassemble it.

Bug wrote:

It's not a rootkit. You seem to have no understanding of what a rootkit is.