Harsh Help

[Rookie]

While searching this site for the way to fix something I
read a response that gave me pause.

I don't think "anonymous" needs to be soooooo critical of
someone getting a worm or virus. Saying that the person
seeking help is "a threat to the entire internet
community" is ridiculous.

I needed to reformat my hard-drive because I wanted to
change the partition and when I reloaded XP the second I
went online I got the bloody sasser.

I'd avoided it the first time around, only to wind up with
it later. The firewall didn't keep it out at all and I
was only online less than a minute. I didn't even get a
chance to get to the bloody download site.

So, Mr. Anonymous, though we appreciate your knowledge,
direction, time to share your particular talent helping
us less-fortunates, and remember you weren't born
with "all knowledge" either you learned from education
from another or by trial and error also. Us dangerous
computer apprentices would appreciate if you could be a
little less harsh with dispensing your criticism.

Rookie

 

[Quaoar]

While searching this site for the way to fix something I
read a response that gave me pause.

I don't think "anonymous" needs to be soooooo critical of
someone getting a worm or virus. Saying that the person
seeking help is "a threat to the entire internet
community" is ridiculous.

I needed to reformat my hard-drive because I wanted to
change the partition and when I reloaded XP the second I
went online I got the bloody sasser.

I'd avoided it the first time around, only to wind up with
it later. The firewall didn't keep it out at all and I
was only online less than a minute. I didn't even get a
chance to get to the bloody download site.

So, Mr. Anonymous, though we appreciate your knowledge,
direction, time to share your particular talent helping
us less-fortunates, and remember you weren't born
with "all knowledge" either you learned from education
from another or by trial and error also. Us dangerous
computer apprentices would appreciate if you could be a
little less harsh with dispensing your criticism.

Rookie

This really sucks big time! The only way around this, and Microsoft
should be publicizing it heavily, is to either acquire the update CD to
keep on hand, or keep your computer isolated and download the security
updates to a secure computer and transfer to the new installation on CD,
locally secured LAN, etc.

Microsoft should take the pro-active approach (since MS *is* the root
enableing cause) and supply free copies of the update CD at major
electronics stores, post offices, and do a one-time AOL-style mailing,
or something along those lines. ISPs should be able to order the CDs
for their customers for direct mailing by Microsoft.

For US customers, the Federal Trade Commission and the Homeland Security
Dept should step in since Internet Explorer has been defined as a threat
to humanity.

Q

Q

 

[Will Denny]

Hi

Which Firewall didn't keep Sasser out? A few more details would may help.

--

Will Denny
MS-MVP Windows - Shell/User
Please reply to the News Groups


| While searching this site for the way to fix something I
| read a response that gave me pause.
|
| I don't think "anonymous" needs to be soooooo critical of
| someone getting a worm or virus. Saying that the person
| seeking help is "a threat to the entire internet
| community" is ridiculous.
|
| I needed to reformat my hard-drive because I wanted to
| change the partition and when I reloaded XP the second I
| went online I got the bloody sasser.
|
| I'd avoided it the first time around, only to wind up with
| it later. The firewall didn't keep it out at all and I
| was only online less than a minute. I didn't even get a
| chance to get to the bloody download site.
|
| So, Mr. Anonymous, though we appreciate your knowledge,
| direction, time to share your particular talent helping
| us less-fortunates, and remember you weren't born
| with "all knowledge" either you learned from education
| from another or by trial and error also. Us dangerous
| computer apprentices would appreciate if you could be a
| little less harsh with dispensing your criticism.
|
| Rookie
|

 

[Jupiter Jones [MVP]]

Rookie;
Most firewalls keep out Sasser.
What firewall?
Was the firewall properly configured?

 

[Rookie]

-----Original Message-----


This really sucks big time! The only way around this, and Microsoft
should be publicizing it heavily, is to either acquire the update CD to
keep on hand, or keep your computer isolated and download the security
updates to a secure computer and transfer to the new installation on CD,
locally secured LAN, etc.

Microsoft should take the pro-active approach (since MS *is* the root
enableing cause) and supply free copies of the update CD at major
electronics stores, post offices, and do a one-time AOL- style mailing,
or something along those lines. ISPs should be able to order the CDs
for their customers for direct mailing by Microsoft.

For US customers, the Federal Trade Commission and the Homeland Security
Dept should step in since Internet Explorer has been defined as a threat
to humanity.

Q

=======

Here! Here! Where's the petition, I'll sign it.

Rookie

 

[Guest]

-----Original Message-----
Hi

Which Firewall didn't keep Sasser out? A few more details would may help.

--

Will Denny
MS-MVP Windows - Shell/User
Please reply to the News Groups


| While searching this site for the way to fix something I
| read a response that gave me pause.
|
| I don't think "anonymous" needs to be soooooo critical of
| someone getting a worm or virus. Saying that the person
| seeking help is "a threat to the entire internet
| community" is ridiculous.
|
| I needed to reformat my hard-drive because I wanted to
| change the partition and when I reloaded XP the second I
| went online I got the bloody sasser.
|
| I'd avoided it the first time around, only to wind up with
| it later. The firewall didn't keep it out at all and I
| was only online less than a minute. I didn't even get a
| chance to get to the bloody download site.
|
| So, Mr. Anonymous, though we appreciate your knowledge,
| direction, time to share your particular talent helping
| us less-fortunates, and remember you weren't born
| with "all knowledge" either you learned from education
| from another or by trial and error also. Us dangerous
| computer apprentices would appreciate if you could be a
| little less harsh with dispensing your criticism.
|
| Rookie
|

========

I have XP Home and made a point to enable the firewall in
Internet Explorer before I went out because I knew I would
have to download all of the updates and patches again.

Now I have to try to get rid of the worm first. It's a
pain.

Rookie

 

[Jupiter Jones [MVP]]

"The only way around this..."
There is another far easier way.
Simply enable/install a firewall.
A properly configured (default with most firewalls) firewall keeps out
Sasser.
If Sasser gets in, there was not a properly configured firewall.

As for your comment "AOL-style mailing,", since I will never use AOL,
this means nothing.
You can already have Microsoft send you notices on important updates.
You can also set Windows to automatically install Critical Updates as
soon as they are available.
What does AOL do?

Anyone in many countries can order the CDs free.

As for the last, notify them, but, as stated above your reason is
flawed since the issue you present does not exist.

 

[Will Denny]

|
| >-----Original Message-----
| >Hi
| >
| >Which Firewall didn't keep Sasser out? A few more
| details would may help.
| >
| >--
| >
| >Will Denny
| >MS-MVP Windows - Shell/User
| >Please reply to the News Groups
| >
| >
| message
| >| >| While searching this site for the way to fix something I
| >| read a response that gave me pause.
| >|
| >| I don't think "anonymous" needs to be soooooo critical
| of
| >| someone getting a worm or virus. Saying that the person
| >| seeking help is "a threat to the entire internet
| >| community" is ridiculous.
| >|
| >| I needed to reformat my hard-drive because I wanted to
| >| change the partition and when I reloaded XP the second I
| >| went online I got the bloody sasser.
| >|
| >| I'd avoided it the first time around, only to wind up
| with
| >| it later. The firewall didn't keep it out at all and I
| >| was only online less than a minute. I didn't even get a
| >| chance to get to the bloody download site.
| >|
| >| So, Mr. Anonymous, though we appreciate your knowledge,
| >| direction, time to share your particular talent helping
| >| us less-fortunates, and remember you weren't born
| >| with "all knowledge" either you learned from education
| >| from another or by trial and error also. Us dangerous
| >| computer apprentices would appreciate if you could be a
| >| little less harsh with dispensing your criticism.
| >|
| >| Rookie
| >|
| ========
|
| I have XP Home and made a point to enable the firewall in
| Internet Explorer before I went out because I knew I would
| have to download all of the updates and patches again.
|
| Now I have to try to get rid of the worm first. It's a
| pain.
|
| Rookie

Hi

The XP Firewall isn't enabled via IE. Control Panel>Network Connections.
Right click on the connection, select Properties and then the Advanced tab.

Have a look at Jupiter's article:

http://www3.telus.net/dandemar/sasser.htm

 

[NoNoBadDog!]

Rookie;

A properly configured firewall *WILL* keep Sasser and Blaster out. And
Anonymous was correct...anyone who does not practice basic security
(firewall installed and configured properly, AV program installed and
updated, and OS keep up to date with Critical Patches) is a threat to
everyone! Sasser and Blaster depend on people with weak or no security on
their box to spread. Those who have little or no security are propagating
the worm. "nuff said.

Bobby

 

[Rookie]

I have XP Home and made a point to enable the firewall in
Internet Explorer before I went out because I knew I would
have to download all of the updates and patches again.

Now I have to try to get rid of the worm first. It's a
pain. As for "properly configured firewalls" come on,
(I'm not being sarcastic here, it's frustration). I only
know what the program tells me. It tells me to check a
box and I'll have a firewall and set my security at a
certain point and I believe it.

Please don't tell me that I have to become a programer or
something just to try to keep in touch with my family on
the internet without all of these problems. It's crazy
for anyone who knows all to expect us all to become
experts before we try to use the internet which was
supposed to have been created to make communications to
distant parts convenient.

Frustration aside, if you'd tell me how to properly set up
the firewall so it doesn't happen to me again before I get
the downloads done, I'd appreciate that.

Rookie

Rookie

 

[Jupiter Jones [MVP]]

There is really nothing to ICF, but it is not enabled thru IE:
http://support.microsoft.com/?kbid=283673
Be sure the firewall is enabled on the connection you use to connect
to the internet.
You may have more than one connection and you need to enable each
separately.
You did not get Sasser if ICF was enabled on the connection in use.

As for Sasser:
http://www3.telus.net/dandemar/sasser.htm

 

[Rookie]

I have to sign off for awhile, someone else needs this
computer, I come back later to see if you can give me some
more info on this firewall issue.
Rookie.

 

[JAX]

Hi Rookie,

I have adopted a habit of taking the network install of all "critical"
updates and keeping them, along with the latest version of my AV program and
firewall on a CD. When I find it necessary to re-format, (that is only when
I have hardware failure or decide to change partition size or some other
experiment), after installing the OS, I install all those before even
connecting to the internet. When I have connected, the first thing I do is
check for updates on any and all of those before doing anything else.
Another thing I have learned is to not use the preview pane in OE. In
theory, your AV would catch any virus but, I'd rather not count on it alone.

FWIW, JAX

 

[Rookie]

Jax,
When you say that you're taking the network install of
all "critical" updates and keeping them on a CD, how are
you doing that? Are you downloading the updates and such
to a CD or backing them up on a CD?

This sounds like an excellent idea, but I don't have a CD
r/w, however my sister does, so if I can download them to
a CD I'd do that.

Another question I've struggled with is which updates do I
really need. If I download the combined update, then
which updates can I skip. The download site always has
them all listed even if I've downloaded the combined one.

{Please forgive my proper lack of terminology)

To Jupiter Jones,
Thank you, I went to the link you suggested for the sasser
worm and learned something new about the worm and Win98 I
didn't know, which causes me to ask a new question.

When my sister got a new computer, I took her old
harddrive and put it in my computer along with mine (so I
have two hard drives now.) Hers had Windows98 on it and I
hadn't taken it off. Could this be where I got the worm?

If so, I hope you all see that there really wasn't any way
for me to know that she had it, since I had XP, I hadn't
kept up on the worm and Win98. I had no idea that it
could get in there since the updates all said that they
weren't needed for Win98.

Anyway, to all of you, my original point was there's so
much information to keep up on and it's all very confusing
for a novice like me, I hope you will accept that there's
just too much for the common man to absorb, that's why we
need you guys that can keep up with it and we need your
patience and kind words when we seek your help.

Humbly appreciative,
Rookie

 

[JAX]

You can get the network installs as a self installing download from the
Windows catalog. Once downloaded, I burn them to CD for storage. You need
all "critical" updates. If you don't have SP1 on your XP CD, download it.
Download the "rollup", it has all updates up to Oct, 03. Take any updates
since that. Note, even with a broadband connection, this will take awhile. I
think it's worth the effort.

LOL, JAX

 

[Rookie]

Sounds like a fine idea to me too. How many CDs did it
take for you to do that?

Rookie

 

[Bob with Teens]

-----Original Message-----
While searching this site for the way to fix something I
read a response that gave me pause.

I don't think "anonymous" needs to be soooooo critical of
someone getting a worm or virus. Saying that the person
seeking help is "a threat to the entire internet
community" is ridiculous.

I needed to reformat my hard-drive because I wanted to
change the partition and when I reloaded XP the second I
went online I got the bloody sasser.

I'd avoided it the first time around, only to wind up with
it later. The firewall didn't keep it out at all and I
was only online less than a minute. I didn't even get a
chance to get to the bloody download site.

So, Mr. Anonymous, though we appreciate your knowledge,
direction, time to share your particular talent helping
us less-fortunates, and remember you weren't born
with "all knowledge" either you learned from education
from another or by trial and error also. Us dangerous
computer apprentices would appreciate if you could be a
little less harsh with dispensing your criticism.

Rookie

.
Start >>> control panel >>> network connections >>>

right click on the connection you use >>> properties >>>
advance tab >>> check box for enable firewall >>> OK >>>
make sure that it shows in the network connection
(ie:local area connection#1 , enabled,firewalled ,
whatever your connection uses)
http://www.microsoft.com/athome/security/protect/windowsxp
/firewall.aspx
try checing this out also.3 steps to check.If you get to
step 3 antivirus computer associates has a free one year
trial for AV and firewall,I have them both and for the
last 6 months they work great,(I have 3 teens,and it
works better than Norton or McAfee)Like I said it's free
for a year.Good luck with that sasser thing,I feel for
you,my teens used to get mine locked up for days with
viruses,Norton would tell me I have but unable to
delete.Finally got the E-Z trust from computer associates
(found it from microsofts update page,3 steps to secure
your computer)step 3 free AV.Got that got rid of Norton
(the best HAHAHA)ran the EZ it said I had the same
virus's and deleted them that EZ(Couldn't believe it was
free).

 

[Quaoar]

"The only way around this..."
There is another far easier way.
Simply enable/install a firewall.
A properly configured (default with most firewalls) firewall keeps out
Sasser.
If Sasser gets in, there was not a properly configured firewall.

As for your comment "AOL-style mailing,", since I will never use AOL,
this means nothing.
You can already have Microsoft send you notices on important updates.
You can also set Windows to automatically install Critical Updates as
soon as they are available.
What does AOL do?

Anyone in many countries can order the CDs free.

As for the last, notify them, but, as stated above your reason is
flawed since the issue you present does not exist.

Well, it was intended to be half parody, half serious. "AOL-style"
refers to their practice of mailing AOL installation disks to everyone
on the face of the earth, at least in the US. The serious part is that
when setting up a new computer, it is likely that the user will be
connected to their internet connection, the operating system is
initially unpatched, and the poor user's computer is immediately
infected. Not a good situation. Ordering the CD from Microsoft is what
the poor user is advised to do after the incident; there is *no*
protection prior to the incident, particularly for the vast majority of
users who have no clue. Microsoft could put a simple, secure tunneling
protocol into the installer that would firewall the user's connection
and phone home to Bill for the security updates as the last step of the
OS installation.

Q

Q

 

[Jupiter Jones [MVP]]

The firewall will be enabled by default in SP 2 so a lot of this will
be a non issue.

If the computer is OEM, the manufacturer is really at least partially
to blame since they determine the state of the firewall and often
leave it disabled.

Users need to educate themselves.

 

[JAX]

One.

JAX

Sounds like a fine idea to me too. How many CDs did it
take for you to do that?

Rookie