XP ALERT - Install Service Pack 1 Now!
 

This is only for the XP users, be it Home, Pro, etc. There is a major security vulnerability that is fixed in SP1, I advise you to upgrade before idiots out there start using this security hole.

Here's what Steve Gibson of http://www.grc.com has to say:

Attention Windows XP Users
A little-known but critical vulnerability exists in Windows XP.
It has recently been repaired in Service Pack 1.

This vulnerability allows the files contained in any specified directory on your system to be deleted if you click on a specially formed URL. This URL could appear anywhere: sent in malicious eMail, in a chat room, in a newsgroup posting, on a malicious web page, or even executed when your computer merely visits a malicious web page. It is likely to be widely exploited soon.

This vulnerability is so dangerous that it would be irresponsible for me to say more. Microsoft has known of this problem for months and has, inexplicably, done nothing before now. Although XP's Service Pack 1 is not small (approx 30 MB for express installation or 140 MB for the network install), and even though a much quicker and easier solution to this problem exists, the only thing I can safely recommend (without revealing too much) is to urge all XP users to somehow obtain and install Service Pack 1 immediately. (If you have a slow Internet connection, perhaps a friend can download the executable Service Pack file and burn it onto a CD for you?)

This problem does not affect any systems other than Windows XP. If you have any friends or co-workers running Windows XP, please urge them to update their systems' too. Once the details of this vulnerability have leaked through other channels I will provide additional information. To visit Microsoft's Windows XP Service Pack 1 download page: CLICK HERE

If this post works ;p

I got the Sp1 in its Beta stages over the last few months :)
Does a few other cool things as well.

kdja

Steve Gibson rules. Have you ever read his site? The story about him hacking the guys that did a DOS to his site is great.

His site is another very good and usefull site. He does tend to go over board sometimes. but means well

I heard somewhere that if you are using a hacked copy of XP and you download this service pack that it will totally screw up your computer, beware.

Actually if you have a hacked copy it simply tells you you cannot install the service pack and exits, it definately doesn't screw up your computer. I have already run into this issue on several PCs, here's some info for ya:

Since the release of Windows XP Professional, Microsoft has discovered that the vast majority of illegitimate copies in use are using a small handful of leaked "corporate" keys. In an effort to thwart these illegitimate users, Windows XP Service Pack 1 (and possibly all future updates) will not install on systems using these keys, and it is unclear what additional steps Microsoft may take in the future. Microsoft claims that legitimate licensed users of XP Professional should be unaffected, however there are a number of different ways one of these leaked keys can find it's way into an otherwise legal environment and cause serious deployment issues. (When a legitimate corporate key is not at hand during an installation process, it's a common practice for some administrators to simple search the web for a valid key.) Here's how to check if your systems are using a leaked key, and how to change the product activation key if they are.

How to find your your Product Key
During the installation of Windows XP Professional, you are prompted to enter a 25 digit Windows XP Product Key, which Windows XP promptly converts it into the system's product ID. Because of security concerns about piracy, Microsoft does not provide a tool that allows you to view the Product Key (or CD Key) that was used to install the operating system. Luckily, a clever guy named Serge Kandakov has created a simple little tool called ViewKeyXP that gets around this problem and actually displays the Product Key used in the installation.

http://www.webtree.ca/windowsxp/tools/ViewKeyXP.exe

The primary code used in the majority of pirated XP copies is:

FCKGW RHQQ2 YXRKT 8TG6W (last group omitted - DogMeat)

This code has been commonly referred to as "DevilsOwn" code, by the hacker who distributed it (along with an ISO CD image of Windows XP) on Usenet warez groups. This is the primary key code that is expected to be blocked by Service Pack 1

Other codes that have been leaked on the web:
(List of codes omitted since they could be misused - DogMeat)


How to change your Product ID in Windows XP
If the product key used in your workstation installations matches the leaked keys above, you may need to change the key in order to install Windows XP service pack 1, and to make sure your environment is legal. You could completely re-install Windows XP Professional or you can try the method below. (Please backup your system before attempting this.) This workaround is only for the corporate editions of Windows XP Professional using a compromised or illegitimate key. Windows XP Home Edition and retail versions of XP Professional should not be affected by Service Pack 1. Although this procedure may work with other versions of XP, we have only tested it on the corporate edition (volume license version) of Windows XP Professional.

(Information on changing your key omitted since it could be misused - DogMeat)

Additional Thoughts...
We are hoping that Microsoft provides a tool for checking machine product ID's on an Enterprise level (either via SMS or another reporting tool) prior to the release of Windows XP SP1. Perhaps they'll see their way to making a tool that can verify and change the Product Keys remotely as well. For now, Microsoft has contacted the corporate customers whose keys have leaked onto the web, but has debunked stories that it is changing volume license keys, or the algorithm used to create them.

Text taken from LabMice.net.
http://www.labmice.net/WindowsXP/articles/changeID.htm
Don't bother going there looking to fill in the blanks tho, now that page only says "This article has been removed from our site by the request of Microsoft Corporation."

After Oct 14 all PIDs will be audited from MS when updating your OS. These will be varified by them via a data base.

They still have to support non-internet attached PCs tho, especially those used in biz, meaning providing seperate downloads for offline usage. Corp standards usually doesn't mean access to Windows Update, in fact that can (and has) cause major IS headaches. I usually do everything this way anyways since I burn the patches so as to have them on hand as needed.

Of course one of the nice things about being a consultant is there is never a lack of corporate licences to play with. Hell I think I've even still got a few 1,000 NT4 client licences around here, wonder if they are even worth the paper they are printed on anymore hehe.

I am sorry if this was already addressed, as I didn't have the time/effort to read this whole post.

I have not looked into the SP1, but I thought the service pack was all the updates that window updates gave me, So if I downloaded all of them, would it we a waste of time to download the serivce pack?

There are additional updates not previously released. Go thru windows update and do the express install, it ill only upgrade those components you need. Its about 35 to 40meg download on an up-to-date computer, more on one that hasn't had any patches installed.

So yes, even if you updated to right before SP1 was released, you gotta go install it anyways.

Side note: The new XP NVida drivers totally kick ass. I gained an avg of 40fps!
[url:8b790]http://www.nvidia.com/view.asp?IO=winxp-2k_40.41[/url:8b790]

Also get the 40.41 hidden features patch here:
http://www.guru3d.com/files/

Get service packs as soon as they come out as they come out for a reason and usually the important security related stuf is in the bottom of the list.


Tho on the PIDs, the company i work for generates them handy to have a backup or 1000.
;p
kdja

Thanks for the notice, I never would have known, as I ignore the update thing that appears at the bottom.

Funny thing though, it messed up my display settings...

wow. I'd better get a registered copy then huh?

;)

will the video driver updates work with gforce 2 mx ? it says it wasnt tested and shit.. but i clicked go ahead anyways.. and then it froze

AND......

Now that I've installed the service pack, MOH won't work. There goes my life!!!

But I'll start another thread to see if I can get some help.

For the people who do not have a fast connection or dont want to dl SP1 for XP

I found this from http://www.3dchipset.com/news.shtml#new ... 7319,68876,

[quote:952a3]Their is a HUGE flaw in Windows XP that allows any website or email to erase your files. The patch in Service Pack 1 fixes this problem, but alot of dial up users who use Windows XP might not want to sit there for hours on end. The quick solution? Rename file: uplddrvinfo. Here is the procedure:
[code:952a3]Do a search for the file name uplddrvinfo in your search and find section in Windows XP
Now the file should be located here: WINDOWS\PCHEALTH\HELPCTR\System\DFS
Rename the .html file uplddrvinfo to anything you want or even delete it[/code:952a3]
This should prevent any major attacks on your computer that you don't realize has happened. For some reason when clicking on a link or opening up a HTML email with the appropriate coding could erase any directory or files the hacker wants.

Hope this helps the thousands who don't want to download the service pack 1 from Windows considering the size and alot of users still on dial-up. [/quote:952a3]

MOHAA works fine for me.

i downloaded it and restarted and all that and when it went to boot up i got this quaint little message: 1720 - SMART hard drive detects imminent failure. backup contents and replace hard drive.

umm this sux

After about an hour, I dowmloaded it and installed it.

Everything worked fine until I went into my email. My account and my girl friends account showed nothing in it. blank, nada.

I had at least a dozen important emails in my account that I lost.
Then the worst happened, I tried to play the SP MOH and the game crashed anytime it tried to do an auto save. (but multi player seemed to work ok.)

That was it. I restored my XP to a previous date and reinstall my MOH.
(I was not happy.)

I'm going to try what Rude Dog suggested and hope it works.

[quote="aNti hEro":de78b]will the video driver updates work with gforce 2 mx ? it says it wasnt tested and shit.. but i clicked go ahead anyways.. and then it froze[/quote:de78b]

Well i have no answer for you, but I have the same thing gf2mx, and downloaded that driver, and it said the same thing, I hit go ahead anyway, I noticed no differnece, possibly a decerease in FPS, but nothing to noticeable.

Now, I guess what I did was dumb, but I just figured i should share my experience with it though.

It works fine with my GForce2 MX400, that warning is telling you it hasn't been certified yet by Microsoft, that's cause it's the very latest driver and prob will cause problems for some users.

Sorry to hear some folks are running into SP1 issues, hopefully it'll get straightened out. Good work RD on finding the manual fix! If I run into a machine that has bad SP1 issues I'll try it out.

well, had a look for SP1 and it said there are no updates available.i have update set to auto but disabled it and still nothing.

[quote:8d973]After about an hour, I dowmloaded it and installed it.

Everything worked fine until I went into my email. My account and my girl friends account showed nothing in it. blank, nada.

I had at least a dozen important emails in my account that I lost.
Then the worst happened, I tried to play the SP MOH and the game crashed anytime it tried to do an auto save. (but multi player seemed to work ok.)

That was it. I restored my XP to a previous date and reinstall my MOH.
(I was not happy.)

I'm going to try what Rude Dog suggested and hope it works.[/quote:8d973]

How do you restore XP to a previous date I have never had to do it before?

Duo, you can do it through, "Start, all programs, accessories, System tools", and it's there at the bottom.

But you may want to look it up in help. For once Windows explains what is does, just not how to do it.

Just to let you all know I made a post reguarding slowdown in gaming due to the SP1. You can read it here:

http://www.alliedassault.com/phpBB2/vie ... p?t=145743

Also, to add to this, I read something on the BF1942 forums about you have to change a setting in BIOS reguarding the AGP aperature in order to play the game if you cannot load it, after installing SP1. I would do some research before fooling with BIOS, tho.