Tech: Microsoft update

Subject: Tech: Anyone who can explain this to me?
From: Ellenpoly
Date: 16 Aug 05 - 12:04 PM

Ok, one of you tech wizards out there should be able to explain this stuff to me in small easy words, so I'll understand?

Yesterday, having read about yet another worm called Zotob, I went to Microsoft Support and downloaded their Updates and something called Windows XP Hotfix.

Today when I went back online I found everything had gone into slow motion due to the Updates being loaded. I only have a slow dial up, and this made it almost impossible to load a page, so after going back to read the latest about Zotob and finding out that it seemed to be only targeting Windows 2000 and older systems, I went to the control panel and removed the Updates and left the Hotfix. The effect was to bring me back to my original speed.

So-here's my question. What are the Microsoft Updates FOR? Do they automatically provide new patches, or do they simply give information about the latest viruses, worms, etc? Are the patches free, or do I need to pay for them?

Am I leaving myself vulnerable by not keeping this update feature on my computer? But if so, what can I do about the slowing up of my downloads?

I do have anti-virus software, and a firewall, but is that enough?

I'd appreciate you're explaining what I should be doing to make sure I'm as protected as I can be, but not brought to a standstill by updates!!

Thanks ahead of time..xx..e

Subject: RE: Tech: Anyone who can explain this to me?
From: Amos
Date: 16 Aug 05 - 12:23 PM

I would suggest, since you don't have a targeted OS, that you just update your virus software.

You could try switching to a Mac, but that would be a bit too easy. I understand.


A

Subject: RE: Tech: Anyone who can explain this to me?
From: Stilly River Sage
Date: 16 Aug 05 - 12:42 PM

Ellen,

There are some things you should do as a matter of routine to keep your computer healthy and happy.

All Programs -> Accessories -> System Tools -> Disk Cleanup/Disk Defragmenter. Use these two programs every so often--I use them monthly.

Use something to help keep the nasties out. Spybot Search&Destroy, AdAware, Spyware Blaster are all free and all good. Run them at least once a week once they are downloaded and in place. They offer regular definition updates.

Visit Microsoft and download updates for your operating system. They'll also have updates for your browser if you use Internet Explorer and if you use the Microsoft Office productivity software there are on occasion upates for those. You will be best served if you set up automatic update and it will download things when they come available and ask you if you want to install them now or later.

When you visit Microsoft it will run a scan of your system and recognise what operating system you're using. It won't tell you to download critical updates you don't need.

It's a guess that if everything was running slow that it was trying to do something in the background that required downloading more material. Once you know what files you need, you might want to find a faster computer connection to download and save those update files to a CD (just choose to save to a file when you are given the choice) then install them on your computer when you're ready. It'll go a lot faster if it doesn't have to download stuff.

SRS

Subject: RE: Tech: Anyone who can explain this to me?
From: Rich_Kelly
Date: 16 Aug 05 - 12:43 PM

Hi,

The hotfixes can contain any number of updates to the operating system. Typically, they'll release new or updated device drivers (software that allows for plug and play with differnt printers, etc), fixes to various bugs in the OS, fixes for possible security issues, etc.

Usually an updated hotfix comes with Release Notes, which lists exactly what the fix is doing.

As a rule of thumb, never download anything from Microsoft the day it becomes available. Even their fixes are notoriously buggy. They'll fix them once enough people complain. I wait a couple of weeks and then download once someone else has reported the inevitable problems.

Subject: RE: Tech: Anyone who can explain this to me?
From: JohnInKansas
Date: 16 Aug 05 - 03:44 PM

There is a difference between an update and a hotfix.

If you have an early version Windows XP many of the updates you need are included in two "Service Releases." Service Release 1 (SR-1) came out long ago, and most original installation CDs include it, so if you reinstalled WinXP it most likely would be a WinXP SR-1 installation. The same situation exists for Windows 2000, where you need an SR-1, but it's also the original installation most widely sold.

You can choose automatic update for any WinXP SR-1 or Win2K SR-1 installation or later. NO OTHER OPERATING SYSTEMS CAN CURRENTLY GET AUTOMATIC UPDATES FROM MICROSOFT.

If your sytem qualifies, and you turn on the Automatic Update service, any Critical Updates (those affecting security) will be "background downloaded." Downloads of course can occur only if you're connected to the net, and will only happen when your "connection is idle." With automatic update you likely will never know that a download is happening.

With Automatic Update, you can choose whether the Critical Updates will be installed automatically as the downloads are finished, or whether you must manually click an "install now" to complete the installation. Some updates require a re-boot, and I believe you will always get a notice "updates are ready" for any that require a reboot, even if you checked the "install automatically" choice.

With Automatic Update, the ONLY visible effect you should see will be an icon that appears on your System Tray at the lower right of the Windows screen (unlesss you've moved the toolbar). When the icon first appears, a small "flag" may pop up momentarily just above the icon, but usually disappears after 10 seconds or so. The standard icon looks like a small yellow "shield" with an exclamation point in the middle.

If you have set up a separate "Administrator" account, you usually must log on as Administrator (or at least with Admin privileges) to see the icon and to install the updates, so you need to log on as Admin occasionally to check if you're set up that way.

If you turn on Automatic Updates you will get all Critical (Security) updates automatically downloaded, and you should never seen an effect on your machine's operation while it's happening.

In Microsoft-speak, "Hot Fixes" are a different animal. A Hotfix is issued to respond to a specific problem and should NEVER BE INSTALLED unless you have experienced that specific problem. Hotfixes are NEVER downloaded automatically, so you must go to the Microsoft Download site(s) to get them, and must manually download them. A general fix, including the hotfix problem, quite often will be included in a later security update - unless its something that's a problem for a very few people.

More to follow(?).

John

Subject: RE: Tech: Anyone who can explain this to me?
From: JohnInKansas
Date: 16 Aug 05 - 05:01 PM

As noted in the preceding, you must have a WinXP SR-1 or later or a Win2K SR-1 or later system to get automatic updates.

If your original OS installation does not meet at least one of these two conditions, you will have to go to the Microsoft Downloads website(s) and manually download any applicable updates.

If you have a WinXP or Win2K original install that does not meet at least the SR-1 condition, Service Releases generally are available on CD by snail mail from Microsoft, and they're free in all cases I know of. Order your free copies at the Microsoft Download sites. You should order any applicable ones and keep them with your install disks, so that you can install at least the Service Release updates from the CDs if you have to rebuild your system. Look for a place to order them at the Microsoft Download sites, and get them if they're applicable.

Installing WinXP SR-2 from the CD can take a half-hour, but that's still a lot better than downloading the 300 MB (minimum) to 800 MB (full) thing over a slow connection - and the install will still take a half-hour when you get it downloaded.

If you have a system that doesn't meet the requirements for automatic updates you still need to visit the update sites occasionally to get critical updates.

If you require manual downloads, you can go to the Microsoft Download sites and just click to get what you need.

When you launch a download, the download has priority over anything else you try to do with your machine, and especially your web connection, until the download is completed. This may make your machine nearly unusable - and for some of the updates it can be for a very long time. While the Operating System will try to fit your other Internet traffic "in between" the download packets, it can be painfully slow. It's a "fact of life" - especially for those of us on dial-up (slow) connections.

Specific for ellenpolly:

1. If you have WinXP SR-1 or later, go to the Microsoft Download site and turn on Automatic Updates. You will (eventually) get all of the security updates you need, and you should never see any negative impact on your machine operation while they are being downloaded. Interruptions to install them as they arrive should be reasonably brief.

2. Take another look at the "Hotfix" you installed. You probably DON'T need it, unless it applies to a specific condition that you have confirmed exists on your individual machine.

3. You do need the Critical updates for WinXP. You will get all of them that you need through Automatic Update once you turn it on.

General for ever'body:

The ONE exception I can think of to using Automatic Update is for people who are on a "pay per second" phone line or possibly for those who use a single phone line for voice and computer. If you never "connect" except to download stuff to use offline, or if your "sessions" are very brief for some other reason, there may not be enough "idle connected" time for downloads to be done in the background.

Automatic update only gets Critical Updates to the Operating System. You need to check occasionally for separate updates to programs. Internet Explorer fixes generally will be included in OS updates, but Office programs have to be manually checked (Go to Office Downloads at the Microsoft Website). In particular, some Word versions require "SR" fixes that can be quite large, if you have an older original installation.

John

Subject: RE: Tech: Anyone who can explain this to me?
From: JohnInKansas
Date: 16 Aug 05 - 05:50 PM

ellenpoly -

When you went to the Microsoft Website and "installed their updates" what you actually did was told them to start downloading. Unless you received a confirmation that each update had completed downloading and had been installed, the slowdown of your machine was most likely because Microsoft was still attempting to finish downloading. In many cases (not always), a download started there will attempt to resume if you disconnect and reconnect to the web later.

It usually is the extended download that people see as a slowdown in their system. If you use AutoUpdate it won't happen, and you should get the Critical Updates.

You didn't say whether the "Hotfix" was for Zotob; but you probably DON'T need it, as noted above.

Just received: Zotob Worms Target Windows 2000 Hole By Paul F. Roberts, eWeek, August 15, 2005.

The vulnerability attacked by the Zotob worm exists only in unpatched Windows 2000 systems.

The vulnerability was patched in an August 9, 2005 Security Update, which any Windows 2000 machine using Automatic Update should already have received.

No Operating System other than the unpatched Win2K should be affected or should require any "fix."

The zotob exploit allows malicious "takeover" of a vulnerable Win2K machine, and if that machine is connected to a network, machines with other Operating Systems could be affected by malicious code installed and run on the infected Win2K; but there is nothing specific to zotob about the other kinds of malware that might get into a network system by this route. Unless you are connected to an internal network (LAN) with infected Win2K machines on it, WinXP users should not be vulnerable to zotob and should require NO HOTFIX for it.

If you are on a network where Win2K users have allowed themselves to be affected, you should go slap them on their wee little butts, in lieu of screwing with your WinXP system. (A preliminary opinion.)

But you should get and install WinXP Critical Updates.

John