[DogMeat]

This is only for the XP users, be it Home, Pro, etc. There is a major security vulnerability that is fixed in SP1, I advise you to upgrade before idiots out there start using this security hole.

Here's what Steve Gibson of http://www.grc.com has to say:

Attention Windows XP Users
A little-known but critical vulnerability exists in Windows XP.
It has recently been repaired in Service Pack 1.

This vulnerability allows the files contained in any specified directory on your system to be deleted if you click on a specially formed URL. This URL could appear anywhere: sent in malicious eMail, in a chat room, in a newsgroup posting, on a malicious web page, or even executed when your computer merely visits a malicious web page. It is likely to be widely exploited soon.

This vulnerability is so dangerous that it would be irresponsible for me to say more. Microsoft has known of this problem for months and has, inexplicably, done nothing before now. Although XP's Service Pack 1 is not small (approx 30 MB for express installation or 140 MB for the network install), and even though a much quicker and easier solution to this problem exists, the only thing I can safely recommend (without revealing too much) is to urge all XP users to somehow obtain and install Service Pack 1 immediately. (If you have a slow Internet connection, perhaps a friend can download the executable Service Pack file and burn it onto a CD for you?)

This problem does not affect any systems other than Windows XP. If you have any friends or co-workers running Windows XP, please urge them to update their systems' too. Once the details of this vulnerability have leaked through other channels I will provide additional information. To visit Microsoft's Windows XP Service Pack 1 download page: CLICK HERE

[kdja]

If this post works ;p

I got the Sp1 in its Beta stages over the last few months :)
Does a few other cool things as well.

kdja

[nomar]

Steve Gibson rules. Have you ever read his site? The story about him hacking the guys that did a DOS to his site is great.

[rudedog]

His site is another very good and usefull site. He does tend to go over board sometimes. but means well

[ozzy1965]

I heard somewhere that if you are using a hacked copy of XP and you download this service pack that it will totally screw up your computer, beware.

[DogMeat]

Actually if you have a hacked copy it simply tells you you cannot install the service pack and exits, it definately doesn't screw up your computer. I have already run into this issue on several PCs, here's some info for ya:

Since the release of Windows XP Professional, Microsoft has discovered that the vast majority of illegitimate copies in use are using a small handful of leaked "corporate" keys. In an effort to thwart these illegitimate users, Windows XP Service Pack 1 (and possibly all future updates) will not install on systems using these keys, and it is unclear what additional steps Microsoft may take in the future. Microsoft claims that legitimate licensed users of XP Professional should be unaffected, however there are a number of different ways one of these leaked keys can find it's way into an otherwise legal environment and cause serious deployment issues. (When a legitimate corporate key is not at hand during an installation process, it's a common practice for some administrators to simple search the web for a valid key.) Here's how to check if your systems are using a leaked key, and how to change the product activation key if they are.

How to find your your Product Key
During the installation of Windows XP Professional, you are prompted to enter a 25 digit Windows XP Product Key, which Windows XP promptly converts it into the system's product ID. Because of security concerns about piracy, Microsoft does not provide a tool that allows you to view the Product Key (or CD Key) that was used to install the operating system. Luckily, a clever guy named Serge Kandakov has created a simple little tool called ViewKeyXP that gets around this problem and actually displays the Product Key used in the installation.

http://www.webtree.ca/windowsxp/tools/ViewKeyXP.exe

The primary code used in the majority of pirated XP copies is:

FCKGW RHQQ2 YXRKT 8TG6W (last group omitted - DogMeat)

This code has been commonly referred to as "DevilsOwn" code, by the hacker who distributed it (along with an ISO CD image of Windows XP) on Usenet warez groups. This is the primary key code that is expected to be blocked by Service Pack 1

Other codes that have been leaked on the web:
(List of codes omitted since they could be misused - DogMeat)


How to change your Product ID in Windows XP
If the product key used in your workstation installations matches the leaked keys above, you may need to change the key in order to install Windows XP service pack 1, and to make sure your environment is legal. You could completely re-install Windows XP Professional or you can try the method below. (Please backup your system before attempting this.) This workaround is only for the corporate editions of Windows XP Professional using a compromised or illegitimate key. Windows XP Home Edition and retail versions of XP Professional should not be affected by Service Pack 1. Although this procedure may work with other versions of XP, we have only tested it on the corporate edition (volume license version) of Windows XP Professional.

(Information on changing your key omitted since it could be misused - DogMeat)

Additional Thoughts...
We are hoping that Microsoft provides a tool for checking machine product ID's on an Enterprise level (either via SMS or another reporting tool) prior to the release of Windows XP SP1. Perhaps they'll see their way to making a tool that can verify and change the Product Keys remotely as well. For now, Microsoft has contacted the corporate customers whose keys have leaked onto the web, but has debunked stories that it is changing volume license keys, or the algorithm used to create them.

Text taken from LabMice.net.
http://www.labmice.net/WindowsXP/articles/changeID.htm
Don't bother going there looking to fill in the blanks tho, now that page only says "This article has been removed from our site by the request of Microsoft Corporation."

[rudedog]

After Oct 14 all PIDs will be audited from MS when updating your OS. These will be varified by them via a data base.

[DogMeat]

They still have to support non-internet attached PCs tho, especially those used in biz, meaning providing seperate downloads for offline usage. Corp standards usually doesn't mean access to Windows Update, in fact that can (and has) cause major IS headaches. I usually do everything this way anyways since I burn the patches so as to have them on hand as needed.

Of course one of the nice things about being a consultant is there is never a lack of corporate licences to play with. Hell I think I've even still got a few 1,000 NT4 client licences around here, wonder if they are even worth the paper they are printed on anymore hehe.

[C20H25N3O]

I am sorry if this was already addressed, as I didn't have the time/effort to read this whole post.

I have not looked into the SP1, but I thought the service pack was all the updates that window updates gave me, So if I downloaded all of them, would it we a waste of time to download the serivce pack?

[DogMeat]

There are additional updates not previously released. Go thru windows update and do the express install, it ill only upgrade those components you need. Its about 35 to 40meg download on an up-to-date computer, more on one that hasn't had any patches installed.

So yes, even if you updated to right before SP1 was released, you gotta go install it anyways.

Side note: The new XP NVida drivers totally kick ass. I gained an avg of 40fps!
[url:8b790]http://www.nvidia.com/view.asp?IO=winxp-2k_40.41[/url:8b790]

Also get the 40.41 hidden features patch here:
http://www.guru3d.com/files/

[kdja]

Get service packs as soon as they come out as they come out for a reason and usually the important security related stuf is in the bottom of the list.


Tho on the PIDs, the company i work for generates them handy to have a backup or 1000.
;p
kdja

[Sgt.Pepper]

Thanks for the notice, I never would have known, as I ignore the update thing that appears at the bottom.

Funny thing though, it messed up my display settings...

[Drunken Mime]

wow. I'd better get a registered copy then huh?

will the video driver updates work with gforce 2 mx ? it says it wasnt tested and shit.. but i clicked go ahead anyways.. and then it froze

[Sgt.Pepper]

AND......

Now that I've installed the service pack, MOH won't work. There goes my life!!!

But I'll start another thread to see if I can get some help.