ALERT: Windows Update Worm!

K

kurttrail

Because of the events of the last week, many people haven been frighten
into installing Windows Updates in record numbers, and, as anyone can
anecdotally see by leafing through these XP Groups, people are
experiencing numerous problems with the updates. It's time to stop
scaring people into blindly installing WinUpdates in a mad rush, and
start teaching "Common Sense Computing" practices, because there is no
such thing as Safe or "Trustworthy Computing!"

WinUpdates aren't all that critical, if you have a good firewall,
updated AV, and use your common sense. WinUpdates are like playing
Russian Roulette, eventually someone pulls the trigger, and finds that
the chamber ain't empty.

Fundamentals of "Common Sense Computing"

1.) Firewall between your computer/network and your internet
connection. And having a software firewall on your computer, in
addition, is even better!

2.) Keep your AV up-to-date! Keep your AV up-to-date! Keep your AV
up-to-date!

3.) Use your common sense! Stay away from high risk activities, like
file-sharing, porn sites, not opening up email attachments from friends
and family, unless you're expecting them in advance, reading before you
click on any pop-up, . . . . the list goes on & on.

3a.) Do WinUpdates on a regular basis, but not en masse, so it will
be easier to figure out what update actually screwed up, when it happens
to you. I'd get used to developing a relationship WinUpdate and reading
a group like this, so that you can hear about any problems that can &
have happened with MS updates, before you install them. [I didn't give
doing WinUpdates a number of it's own, because it really is only a part
of using your common sense.]

If you are far behind in your updates, Pre-SP1, then have a plan before
you start installing WinUpdates. If you haven't already, install the
RPC patch!

Direct-Download for the RPC/DCOM patch -
http://microsoft.com/downloads/deta...6C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

Once you have the RPC/DCOM hole closed, start your planning for
installing SP1. Don't do the Express install of SP-1 from WinUpdate, do
the administrator install. It's a very large download, if you don't
have broadband, ask a friend that does, if they could burn you a copy of
SP1, if you gave them a blank CD. People helped out strangers during
the Blackout in the Northeastern US & Southeastern Canada, and friends
should help out their friends though this web disaster!

Direct-Download for Windows XP Service Pack 1a Network Installation -
http://download.microsoft.com/download/5/4/f/54f8bcf8-bb4d-4613-8ee7-db69d01735ed/xpsp1a_en_x86.exe

Even after successfully installing SP1, I'd recommend staying away from
Windows Update for catching up with the post-SP1 Updates.

Windows XP Post-SP1 Hotfixes -
http://support.microsoft.com/defaul...ServicePacks/Windows/XP/Post-SP1_Hotfixes.asp

Direct Download Alternatives to Windows Update for all Critical Updates:

1.) Windows Update Catalog -
http://v4.windowsupdate.microsoft.com/catalog/en/default.asp or,
http://v4.windowsupdate.microsoft.com/en/default.asp?corporate=true

2.) MS's Security Bulletins Archive -
http://www.microsoft.com/security/security_bulletins/archive.asp

There is a couple of other things to consider before catching up with
your updates. One of the recent updates fixed a flaw in MDAC.
WinUpdate offers to patch the existing MDAC on your computer, but not
the latest version that doesn't have the flaw.

Direct-Download for Microsoft Data Access Components (MDAC) 2.8 -
http://download.microsoft.com/download/c/d/f/cdfd58f1-3973-4c51-8851-49ae3777586f/MDAC_TYP.EXE

Then there is the DirectX flaw, which WinUpdate gives you both the patch
to the version already installed on your computer, and the newest
version without the flaw.

Direct-Download for DirectX 9.0b Redistributable for Software
Developers -
http://download.microsoft.com/download/c/9/c/c9c8a1d4-7690-4c98-baf3-0c67e7f3751f/dx90b_redist.exe

Starting to see a theme building here? Whenever possible don't trust
WinUpdate, but do the direct downloads, and install a patch at a time,
and install new versions without the discovered flaw, over just patching
the flawed versions already on your computer. Before beginning the
manual installation process, disconnect from the internet, create a
restore point, and turn off your AV's real-time scanning. Somebody
always has problems with any patch, no matter how well written it is, or
not, and especially at this time of very heavy traffic on WinUpdate,
doing direct-downloads just makes common sense.

There is not now or will there ever be any such thing as Safe or
"Trustworthy Computing." Don't rely on any one company, or technology
to protect your computing environment. It's the virtual Wild West out
there, and the only thing you can trust is your own common sense, with
maybe a little help from your friends.

--
Peace!
Kurt
Self-anointed Moderator
microscum.pubic.windowsexp.gonorrhea
http://microscum.kurttrail.com
"Trustworthy Computing" is only another example of an Oxymoron!
"Produkt-Aktivierung macht frei!"
 
M

Mike Mulligan

One of the beautiful things about Windows Update is that it's a complete
no-brainer to use. Whether you are installing one update or 50, Windows
Update takes care of all the details. No one should be afraid of installing
'too many' updates, and that very admonition is absurd.

Equally absurd is to cross-post to so many newsgroups. If you wish large
numbers of people to read your 'valuable' opinions, create a web page and
use up your own bandwidth.

Mike Mulligan

kurttrail said:
Because of the events of the last week, many people haven been frighten
into installing Windows Updates in record numbers, and, as anyone can
anecdotally see by leafing through these XP Groups, people are
experiencing numerous problems with the updates. It's time to stop
scaring people into blindly installing WinUpdates in a mad rush, and
start teaching "Common Sense Computing" practices, because there is no
such thing as Safe or "Trustworthy Computing!"

WinUpdates aren't all that critical, if you have a good firewall,
updated AV, and use your common sense. WinUpdates are like playing
Russian Roulette, eventually someone pulls the trigger, and finds that
the chamber ain't empty.

Fundamentals of "Common Sense Computing"

1.) Firewall between your computer/network and your internet
connection. And having a software firewall on your computer, in
addition, is even better!

2.) Keep your AV up-to-date! Keep your AV up-to-date! Keep your AV
up-to-date!

3.) Use your common sense! Stay away from high risk activities, like
file-sharing, porn sites, not opening up email attachments from friends
and family, unless you're expecting them in advance, reading before you
click on any pop-up, . . . . the list goes on & on.

3a.) Do WinUpdates on a regular basis, but not en masse, so it will
be easier to figure out what update actually screwed up, when it happens
to you. I'd get used to developing a relationship WinUpdate and reading
a group like this, so that you can hear about any problems that can &
have happened with MS updates, before you install them. [I didn't give
doing WinUpdates a number of it's own, because it really is only a part
of using your common sense.]

If you are far behind in your updates, Pre-SP1, then have a plan before
you start installing WinUpdates. If you haven't already, install the
RPC patch!

Direct-Download for the RPC/DCOM patch -
http://microsoft.com/downloads/deta...6C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

Once you have the RPC/DCOM hole closed, start your planning for
installing SP1. Don't do the Express install of SP-1 from WinUpdate, do
the administrator install. It's a very large download, if you don't
have broadband, ask a friend that does, if they could burn you a copy of
SP1, if you gave them a blank CD. People helped out strangers during
the Blackout in the Northeastern US & Southeastern Canada, and friends
should help out their friends though this web disaster!

Direct-Download for Windows XP Service Pack 1a Network Installation -
http://download.microsoft.com/download/5/4/f/54f8bcf8-bb4d-4613-8ee7-db69d01735ed/xpsp1a_en_x86.exe

Even after successfully installing SP1, I'd recommend staying away from
Windows Update for catching up with the post-SP1 Updates.

Windows XP Post-SP1 Hotfixes -
http://support.microsoft.com/defaul...ServicePacks/Windows/XP/Post-SP1_Hotfixes.asp

Direct Download Alternatives to Windows Update for all Critical Updates:

1.) Windows Update Catalog -
http://v4.windowsupdate.microsoft.com/catalog/en/default.asp or,
http://v4.windowsupdate.microsoft.com/en/default.asp?corporate=true

2.) MS's Security Bulletins Archive -
http://www.microsoft.com/security/security_bulletins/archive.asp

There is a couple of other things to consider before catching up with
your updates. One of the recent updates fixed a flaw in MDAC.
WinUpdate offers to patch the existing MDAC on your computer, but not
the latest version that doesn't have the flaw.

Direct-Download for Microsoft Data Access Components (MDAC) 2.8 -
http://download.microsoft.com/download/c/d/f/cdfd58f1-3973-4c51-8851-49ae3777586f/MDAC_TYP.EXE

Then there is the DirectX flaw, which WinUpdate gives you both the patch
to the version already installed on your computer, and the newest
version without the flaw.

Direct-Download for DirectX 9.0b Redistributable for Software
Developers -
http://download.microsoft.com/download/c/9/c/c9c8a1d4-7690-4c98-baf3-0c67e7f3751f/dx90b_redist.exe

Starting to see a theme building here? Whenever possible don't trust
WinUpdate, but do the direct downloads, and install a patch at a time,
and install new versions without the discovered flaw, over just patching
the flawed versions already on your computer. Before beginning the
manual installation process, disconnect from the internet, create a
restore point, and turn off your AV's real-time scanning. Somebody
always has problems with any patch, no matter how well written it is, or
not, and especially at this time of very heavy traffic on WinUpdate,
doing direct-downloads just makes common sense.

There is not now or will there ever be any such thing as Safe or
"Trustworthy Computing." Don't rely on any one company, or technology
to protect your computing environment. It's the virtual Wild West out
there, and the only thing you can trust is your own common sense, with
maybe a little help from your friends.

--
Peace!
Kurt
Self-anointed Moderator
microscum.pubic.windowsexp.gonorrhea
http://microscum.kurttrail.com
"Trustworthy Computing" is only another example of an Oxymoron!
"Produkt-Aktivierung macht frei!"
 
K

kurttrail

Mike said:
One of the beautiful things about Windows Update is that it's a
complete
no-brainer to use.

The Crypographic error is a real no-brainer! ROFL!

http://www.updatexp.com/cryptographic-service.html
Whether you are installing one update or 50,
Windows
Update takes care of all the details.

Have you just been ignoring all the problems people have been having
with WinUpdates lately, or just hiding your head in the sand?
No one should be afraid of
installing 'too many' updates, and that very admonition is absurd.

What is absurd is trusting 40 or more updates to install flawlessly.
Equally absurd is to cross-post to so many newsgroups.
Why?

If you wish
large
numbers of people to read your 'valuable' opinions, create a web page
and
use up your own bandwidth.

http://microscum.kurttrail.com/comsense/

Still tweaking it though!

--
Peace!
Kurt
Self-anointed Moderator
microscum.pubic.windowsexp.gonorrhea
http://microscum.kurttrail.com
"Trustworthy Computing" is only another example of an Oxymoron!
"Produkt-Aktivierung macht frei!"
 
P

PCyr

How can one, "waste bandwidth"?

--
Check out http://www.kellys-korner-xp.com for amazing tweaks and fixes

Member of "Newsgroups are for everyone" (Perdita X. Twitt is a
self-appointed, self-righteous, ruthless, bitchy net-cop too!)

Email address is fake to prevent SPAM.
Real email address is pcyr2000 AT hotmail DOT com
Change the obvious to the obvious.
------------------
 
K

kurttrail

PCyr said:
How can one, "waste bandwidth"?

Matter of perspective, I suspect.

What I can't figure out is where Mike came up with thinking that I was
saying that people "should be afraid of installing 'too many' updates?"


I posted to six groups, at 6KB each. 36KB on MS's dime, as compared to
151KB on mine. Actually seems a rather efficient use of bandwith,
especially when you consider that it was also a good introduction to the
web page.

http://microscum.kurttrail.com/comsense/

--
Peace!
Kurt
Self-anointed Moderator
microscum.pubic.windowsexp.gonorrhea
http://microscum.kurttrail.com
"Trustworthy Computing" is only another example of an Oxymoron!
"Produkt-Aktivierung macht frei!"
 
N

Nick Goetz

One of the beautiful things about Windows Update is that it's a
complete no-brainer to use. Whether you are installing one
update or 50, Windows Update takes care of all the details. No
one should be afraid of installing 'too many' updates, and that
very admonition is absurd.

Equally absurd is to cross-post to so many newsgroups. If you
wish large numbers of people to read your 'valuable' opinions,
create a web page and use up your own bandwidth.

Mike Mulligan
Lot of usefull and sensible information in that post.

Why not crosspost it to "appropriate" groups?

Nick Goetz
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top