 |
 |
 |
| Tuesday, September 07, 2010
|
| Register Login |
 |
 |
 |
 |
|
Users currently online
|
|
 |
 |
 |
 |
Membership: |
 |
Latest:
SullyC |
 |
New Today:
0 |
 |
New Yesterday:
0 |
 |
Overall:
53 |
 |
People Online: |
 |
Visitors:
5 |
 |
Members:
0 |
 |
Total:
5 |
Online Now:
|
|
 |
|
|
 |
 |
|
|
|
Welcome to the Viruswarning forums. All your original content has been ported to the new forums as well as new content and additional opportunities to interact with the authors of Viruswarn.com. You can always access old content at www.leedrake.com/forum . You may find some formatting was lost in the conversion and the older versions of the posts to be more readable....
But at least it's all here.
Enjoy!
|
 |
 |
 |
 |
|
Viruswarn Forums
|
|
 |
 |
 |
| You are not authorized to post a reply.
|
|
| Author |
Messages |
|
Lee Drake Posts:238
 |
| 08/15/2004 5:29 PM |
|
| What it is
A truly major update to Microsoft Windows XP, and many of it's dependent programs (internet explorer, outlook express, etc.). This version is perhaps the most ambitious attempt to do a better job of locking down windows XP. While it may cause problems with some programs - most users haven't experienced any problems they wouldn't already have if they were using a product such as ZoneAlarm or Black Ice to defend their system. Most incompatibilities are introduced as a result of the new outgoing and incoming firewall protection.
Why do you want it? Well how about these new features:
A firewall roughly equivalent to a stripped down version of ZoneAlarm - complete with exceptions, port forwarding, and outgoing packet filters.
The ability to block images in emails in Outlook Express prevents spammers from determining if you opened their mail.
Better handling of wireless connections, with an easier user interface
Data Execution Protection prevents some programs that use buffer overflows to execute viruses and worms from running.
Turns off a number of features that shouldn't be on by default (for instance the Windows Messenger Service)
Blocks pop-ups. My experience has been that the pop-up blocker is the equivalent of Goggle's Toolbar. If you downloaded and installed Google toolbar JUST for the pop-up blocker you can remove it and just use the one built into IE now.
Dozens of security updates rolled into a single update file.
What you should do
Backup your machine first. There is a small, but real, chance that your machine may not boot properly after SP2 is applied. If that happens you'll feel much better - and much safer - if your important files are backed up to a CD-R, a separate drive, tape, or floppy disks. If you're not sure how to backup your machine, I'd advise having a friend or a relative who knows how to do this do so BEFORE you install SP2. It's good to have a complete backup anyways. Be sure that they show you how best to backup your machine, and where the important files lie. Full instructions for backing up are beyond the scope of this document.
If you have a white-box machine with an ASUS Motherboard it's strongly recommended that you be sure you have an updated bios prior to installing SP2. Most of the machines that SP2 rendered unbootable needed a bios update for their ASUS motherboard prior to install. If you have a brand name machine (HP, Gateway, Dell, etc.) you probably do NOT have an ASUS motherboard.
XP SP 2 will be automatically downloaded after August 17th and you'll be offered the chance to install it if you have "automatic updates" turned on (See the other references section for how to turn this on). Unfortunately SP 2 is a huge file - over 252MB in it's full form. While windows update only loads the portions you need - if you have a modem you may want to find a friend or a local retailer who will burn a copy to CD for you, rather than trying to download such a huge file over a modem. It could literally take hours or days. It took almost 20 minutes for me to download it via my cable modem. Regardless of how you get the update, you should reserve at least 1/2-1 hour to install it. It will take at least that long to backup, install and update your machine. On some machines it can take up to 45 minutes or an hour - after all the downloading is done. You can significantly reduce the time it takes to install if you follow a few simple rules:
Disable real-time virus protection while installing. If you got the update from Microsoft directly (don't download it from ANYWHERE else) your machine should be safe as long as you follow the next rule.
Do NOT attempt to run other programs, whether they be browser, email or office programs while the installation is running.
Close down any unnecessary programs or system tray applications prior to installing.
You can only install SP2 logged in as a user who has administrative permissions on your machine
I got it started, answered the first few questions, then went and had a nice cup of tea and watched the television for a while - I recommend you do the same :)
If you are a system administrator, be aware that the moment it becomes available on Windows update - every machine in your office that's configured to automatically update is going to begin downloading it in the background. This could cause significant slowdowns, and bandwidth crunch at the internet gateway. You may want to opt for a more controlled deployment by downloading the full package once, and installing it using CD ROMs or over your local network. There are instructions in the technical details section for disabling automatic updates if you plan to release SP 2 in this fashion.
Before installing SP2 be sure you have enough room - SP2 will use up to 1.5GB of storage during the install (and leaves about 800MB behind when it's done), In addition to this you should always have 1-2GB of breathing room on your hard drive. Basically if you have less than 4GB free, consider freeing up some space before installing SP2.
You may also want to examine the list found at: http://support.microsoft.com/default.aspx?kbid=884130&product=windowsxpsp2 which lists programs that might be affected by SP2. If you have one of these programs you should look further in their product support for any special steps or firewall configuration issues you may have with the software. If you run gaming servers, or instant messaging software look carefully at what you may need to do to configure them for best compatibility.
Setting up SP2 requires little user intervention. It asks you if you want to back up your existing system files (you do). Once you've installed it (remember this part takes 30-60 minutes or more - if you think it's hung up, it is not - interrupting it in the middle would be a "bad thing"). It will ask you to reboot your system. Be sure to do this and log into the system with a user that has administrative privileges. The system will then ask you if you wish to activate the Windows firewall (unless you have Zone Alarm or Black Ice already the answer is "YES"). As other processes boot up, you may be asked if they should be allowed to see the internet. If you know your machine is clean and virus and spybot free - you should probably answer yes to these as they come up. If you're not sure, examine them and see if they're programs you recognize as "internet enabled". As you use other programs on your machine from time to time you may see that you get a prompt asking if it's ok for them to see the internet. Use your best judgment on these.
After you update you may notice a few things. The pop-up blocker in IE will put a status bar at the top of a web page if it blocks a pop-up and "click" your speakers. This is very similar to the Google Toolbar pop-up blocker. Clicking this bar will allow you to choose whether to permanently or temporarily allow pop-ups from that web site. Additionally you'll see that Outlook Express now blocks by default picture display in the preview pane. You need to click the bar each time to allow pictures to display in any particular email message. This protects you from having web sites detect if you've accessed their site. If you don't display the pictures so called "Web bugs" cannot identify that you've read the mail. Outlook 2003 has had this feature for a while - it's a welcome addition to Outlook Express.
There are many other new features. See the "Other References" section for more complete information. While this is a significant update - we see this as an important step in securing your windows system. We recommend that everyone update as soon as they can. We'll let people know additional information as we learn more about this important update.
Other references
Wizard to turn on automatic updates for you prior to SP 2 being released:
http://www.microsoft.com/athome/security/protect/default.aspx
Download full version of Windows XP SP2 (note - 252MB!):
http://www.microsoft.com/downloads/details.aspx?FamilyId=049C9DBE-3B8E-4F30-8245-9E368D3CDB5A&displaylang=en
Programs whose functionality might be affected by Windows XP SP2:
http://support.microsoft.com/default.aspx?kbid=884130&product=windowsxpsp2
http://support.microsoft.com/default.aspx?kbid=842242&product=windowsxpsp2
Troubleshooting problems with Windows XP SP2 firewall:
http://support.microsoft.com/default.aspx?kbid=842242
Detailed technical info on Windows XP SP2 Firewall:
http://support.microsoft.com/default.aspx?kbid=875357
Information on the new "Data Execution Prevention" Error:
http://support.microsoft.com/default.aspx?kbid=875351
Backing up Windows XP:
http://www.microsoft.com/windowsxp/using/setup/learnmore/bott_03july14.mspx
New features of Windows XP SP2 (various tutorials and fact sheets):
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/winxpsp2.mspx
What to do after installing XP SP2:
http://support.microsoft.com/default.aspx?scid=fh;ln;xpsp2installed
Cheers, and good luck!
Lee Drake
Aztek Computer Solutions, Inc.
274 N. Goodman St Suite B269
Rochester, NY 14607
|
|
|
|
|
Lee Drake Posts:238
 |
| 09/06/2004 11:25 AM |
|
| What it is
Clients who are configured to download updates automatically will not receive Windows XP SP2 until August 25th at the earliest for Windows XP Pro and August 18th for Windows XP Home. Microsoft delayed autoupdate release until this date to give organizations time to either block the download or patch using other methods prior to it being released. If you are a Windows XP Home user you will begin receiving the file on Wednesday.
What to do
If you're planning to update and have the time and bandwidth to download prior to the automatic release date - feel free to do so by downloading the entire package and installing it. If you're happy to wait you will receive it automatically on the 25th or later.
Additional references
I received this information through NT Bugtraq - I don't have a Microsoft reference for it yet, but NT Bugtraq tends to be pretty accurate, as there are several Microsoft employees that use this message board.
Lee Drake
Aztek Computer Solutions, Inc.
274 N. Goodman St Suite B269
Rochester, NY 14607
the human side of computing
Email: ldrake@azcomputer.net
Web: www.azcomputer.net Office Phone: 585-242-2060
Fax number: 585-242-9441
|
|
|
|
|
Lee Drake Posts:238
 |
| 09/06/2004 11:26 AM |
|
| What it is
I mentioned that there are rumors of problems with SP2 and Asus motherboards. Although there is nothing official on their site or Microsoft's they did post a whole batch of bios updates on August 11th and 12th for a number of their motherboards. If your motherboard is one of the following models, you should check the website for a bios update and apply it prior to applying SP2 to your Windows XP machine:
A7V8X-MX SE
K8N-E Deluxe
P4G800-V
P4P8X SE
P4P800 Deluxe
P4P800S SE
P4P8X
K8N-E Deluxe
P4P800 SE]
P4P800S
P4R800-VM
P4S800-MX
You can find the updates at:
http://www.asus.com/support/support.aspx
What you should do
Go to Asus' website at: http://www.asus.com/support/support.aspx, download and apply the proper update for your motherboard. If you know you have an ASUS motherboard, but don't know which one, DO NOT just download a random bios file and attempt to apply it. Call your dealer who built your machine and get the information from them.
Applying bios updates can be a very simple operation - but if something goes wrong it can make your machine unbootable. Be sure that you read the instructions for updating VERY CAREFULLY and follow them to the letter. Be sure that your machine will NOT be interrupted or rebooted in the middle of the bios update.
Other references
http://www.asus.com/support/support.aspx
http://isc.sans.org/xpsp2.php (type asus into the search box for other user's experiences)
Cheers,
Lee Drake
Aztek Computer Solutions, Inc.
274 N. Goodman St Suite B269
Rochester, NY 14607
the human side of computing
Email: ldrake@azcomputer.net
Web: www.azcomputer.net Office Phone: 585-242-2060
Fax number: 585-242-9441
|
|
|
|
|
Lee Drake Posts:238
 |
| 09/06/2004 11:26 AM |
|
| What it is
A simple executable tool that will prevent the automatic download of SP 2 through windows update. After running this tool you'll need to download and install Service Pack 2 manually. Typically this should only be used by modem users, or by large organizations that don't have the bandwidth to download multiple copies of Windows Update. We still recommend that windows update be applied to every system, unless you know ahead of time of a conflict with yours.
What should you do
If you wish to block the download of Service Pack 2 download and run the tool at the link under other resources. You must be administrator on a system or run the tool.
Other Resources
http://go.microsoft.com/fwlink/?LinkId=33517
Cheers,
Lee Drake
Aztek Computer Solutions, Inc.
274 N. Goodman St Suite B269
Rochester, NY 14607
the human side of computing
Email: ldrake@azcomputer.net
Web: www.azcomputer.net Office Phone: 585-242-2060
Fax number: 585-242-9441
|
|
|
|
|
Lee Drake Posts:238
 |
| 09/06/2004 11:26 AM |
|
| What it is
Another type of machine that causes blue-screen problems if you don't have the correct Bios Revision:
Owners of Dell D600 Laptops with Bios versions less than A12 you should update your bios to that version or later prior to installing SP2. Using SP2 on a D600 laptop with a lower revision bios can cause hard drive corruption and complete loss of data on the system. Your bios revision should show on the screen during a cold boot.
What to do
If you don't have a Dell D600 laptop you don't need to do anything. If you do have one download the A12 System Bios Patch patch from:
http://support.dell.com/support/downloads/download.aspx?c=us&l=en&s=gen&releaseid=r78731&fileid=103907
Backup your machine and install it according to it's instructions prior to installing Service Pack 2.
Further references
http://support.dell.com/support/downloads/download.aspx?c=us&l=en&s=gen&releaseid=r78731&fileid=103907
Lee Drake
Aztek Computer Solutions, Inc.
274 N. Goodman St Suite B269
Rochester, NY 14607
the human side of computing
Email: ldrake@azcomputer.net
Web: www.azcomputer.net Office Phone: 585-242-2060
Fax number: 585-242-9441
|
|
|
|
|
|
| You are not authorized to post a reply. |
|
|
|
ActiveForums 3.6
|
 |
|
|
|
|
|
 |