![]() | ||||
| Just the facts | ||
| Title | Windows XP 101 - PART 2 - Paris Hilton Knows CyTRAP's THREE Rules for Better Securing her PC with Windows Update | |
| Description | Using Windows Update the smart & better way for improved protection & less work | |
| CyTRAP LABs ID | CT210009 | |
| Date | 2005-10-24 | |
| Systems affected | ||
| Select language |
|
|
| Version number | 1.0 | |
| ISSN | 1603-9866 | |
| Verify tip | http://casescontact.org/tips/210009 | |
| Risk assessment | High | |
| Impact/Severity | High | |
| Audio/Podcast files |
|
|
Why not get new tips and alerts by e-mail directly to your in-box? It's much more convenient: |
||
| What's up? | ||||
|
||||
| What is the threat or vulnerability? |
|
|||
| Problem & Solution | |||
| Admin |
| ||
| What does it mean to me? Am I vulnerable? |
|
||
| If I fix the problem - will it help me? How |
|
||
| How can one describe the solution? |
|
||
| Does Microsoft offer me a solution? |
|
||
| Where can I get more help? |
|
||
| What is the solution to this problem ? | ||
| Tip 1 | Here click on Express updates this is the easiest way and it tends to only give you updates that are critical, usually security stuff only (see also Rule 2).
If you want to see choose custom In both instances you get to a page called: Genuine Windows Validation That checks if your Windows Operating System is a licensed or pirated version. In case of running a pirated one, only security updates can be installed. Microsoft should be commended for this because it reduces the pain and risks for its customers since others, pirated versions would go unpatched, thereby possibly causing a nightmare for all law abiding and paying customers. If you have disable Active X options or set your firewall to stop most traffic, you may get:
Validation Incomplete: Unable to collect enough information about your PC to make a determination.
Reasons this PC Failed
Actions
Correct the problem listed above.
If you believe your copy of Windows is genuine, then attempt to resolve the issue listed above and return to complete the validation process. If you get the above message you have to do the following: Disable Run Active X controls and plug-ins The above is a bit cumbersome, but if you use another browser for surfing and Microsoft Explorer for this regular exercise only... reduces risks...its advisable, otherwise you must disable Run Active X controls every time you go through this procedure. |
|
| Tip 2 | You can now continue this process and after running the plug in, you should get this message:
Validating Your Computer
In order to validate your copy of Windows, additional system information is being collected from your computer. Note: This process does not collect information that can be used to identify or contact you. Click on Continue Please click Continue to complete the validation process. The system will then likely come back with a message similar to:
The scan of your computer has completed and it appears that you are running genuine Windows. At this time we are unable to determine the manufacturer of your PC and in the future additional validation may be required. You may wish to verify that the PC manufacturer name that is printed on the Certificate of Authenticity (COA) matches the manufacturer of your PC.
No further action is required at this time to complete your validation. Please click Continue. Afterwards you might be asked to reboot the machine and re-visit the site below: To get the updates, another strategy is to go to Tidbit 3 below and just download the whole batch at once without having to go through all this validation process. Microsoft prefers if customers use Automatic Updates, here no validation process is required enabling if non-licensed versions of Windows to get the critical security patches. |
|
| Tip 3 | Want to use another free tool to check if your computer is infected?
After dowloading this 0.8 MB tool from Microsoft, it checks your computer onceif it is infected by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps you in removing any infection found. If an infection is found, the tool will display a status report the next time you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center or run an online version from microsoft.com. This tool is not a replacement for an anti-virus product. To help protect your computer, you should use an anti-virus product. More information for this update can be found at Office updates |
|
| Take another 2 minutes - More tricks to safeguard your information better | ||
| Tidbit 1 | What are the security reasons why I should not use the Automatic Update feature? We can think of four good reasons why one would not want to choose the Automatic Update option: Reason A) The patch itself may be flawed and may not do what it was intended to do. Being quick to download and install that patch (the benefit of Windows Update) is not always a good move. Microsoft has a long history of releasing patches (and software) that need more in-house testing. Those who adopt push patching will become inadvertent beta testers, and their systems will suffer (see the UK department) give link B) Many updates (Microsoft and otherwise) can result in unknown conflicts with other system services, third-party software, or hardware. It is tough enough to deal with this when you discover it through in-house testing. Now consider how much worse it would be if all of your systems got a bad patch simultaneously, and it brought down a large portion of your mission-critical systems. C) Someone at Microsoft might intentionally or accidentally insert destructive code or perhaps a back door into a patch that is pushed with Windows Update. Microsoft will say that this is farfetched and that it has many layers of protection designed to prevent this, but recall that Microsoft servers have been compromised internally in the past. Also, remember that just last spring, someone who claimed to work for Microsoft was able to obtain fraudulent digital certificates. D) If a home user does not have a broadband Internet connection. Even if all the other objections raised above wer not true, consider how much downtime you will experience with periodic large downloads being forced into your PC. Many Microsoft patches run into the megabytes. Since the download is a background task, this is not a problem if you have a huge pipe but if you run on a |
|
| Tidbit 2 | Do you want to change the way Automatic Updates are handeld on your PC? If you want to change your automatic update features you chose you can also get it from your System Tray, do the following: Click on Start, Control Panel, then click on Automatic Updates and you have the same click up window again, Click auf Start, Systemsteuerung, Is again the best option see Rule 2 and Where can I get more help for a rational for doing so. |
|
| Tidbit 3 | Just puchases a new PC and wonder if you need updates? Help is here
There are several ways to protect your machine better before going on the Internet. One is to get all updates (cumulative patches) from one of the two links below. They are all in one package, meaning you can burn them onto a CD or save them on a memory stick and than install them on your new machine. Please also check out this link for |
|
| Watch out | Running SP2 on Your PC - Are You Sure? Quick Check Offered by Microsoft SP2 was a big patch that was much about security for Windows SP and not much more but because of this its a real gem and Grandma recommends that you make sure that your system is patched accordingly. Get it here: http://www.microsoft.com/athome/security/protect/windowsxp/Default.mspx The screen will tell you at the top if your Windows XP is running SP2 - otherwise it will help you get it installed. Watch Out For Next Tip |
|
| CYTRAP resources - check it out - because it will help you better protect yourself | ||
| Related tips | ||
| Alerts | ||
| Glossary | ||
| Administrative | ||
| Author | Urs E. Gattiker - CyTRAP Labs | |
| Revisions | ||
| Contact details | Web: http://CASEScontact.org E-mail: support01@CASEScontact.org Tel: +41(0)76-200-7778 or + 44(0)70-9237-6036 Fax: +44(0)70-9237-6036, dial 3 send fax |
|
|
--END of ADVISORY - Important Info Below-- | |
| We recommend that you VERIFY ALL ADVISORIES you receive IMMEDIATELY, by clicking on the link provided at the top of this alert. |
|
NO WARRANTY Any material furnished by CASEScontact.org is furnished on an 'as is' basis. CASEScontact.org, writers & sponsors make no warranties of any kind, either expressed or implied as to any matter including, but not limited to, warranty of fitness for a particular purpose or merchantability, exclusivity or results obtained from use of the material. |
|
Ride the rollercoaster successfully by subscribing to our alerts, tips, tools and skills training receiving them either via: 1) e-mail
| |
NO WARRANTY Any material furnished by CASEScontact.org is furnished on an 'as is' basis. CASEScontact.org, writers & sponsors make no warranties of any kind, either expressed or implied as to any matter including, but not limited to, warranty of fitness for a particular purpose or merchantability, exclusivity or results obtained from use of the material. |
|
CASES writers & sponsors do not make any warranty of any kind with respect to freedom from patent, trademark, or copyright infringement. Full DISCLAIMER notice at: http://www.casescontact.org/terms.php |
|
UNSUBSCRIBE If you no longer wish to receive this TIP ADVISORY, please Unsubscribe at: http://www.casescontact.org/unsubscribe.php QUESTIONS, comments, ideas? Cheer us up at:Tips-Comments at CASEScontact.org CASEScontact.org -- Threat Alerts and Security Notices --clear and precise, no compromise - |
|
-- END of TIP & Tricks ADVISORY-- Copyright (c) 2007 by CyTRAP labs - Urs E. Gattiker. All rights reserved. | |