Comments on: Microsoft Security Updates, and a Farewell to Windows XP Service Pack 2 http://krebsonsecurity.com/2010/07/microsoft-security-updates-and-a-farewell-to-windows-xp-service-pack-2/ In-depth security news and investigation Sat, 11 Feb 2012 19:29:31 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: JCitizen http://krebsonsecurity.com/2010/07/microsoft-security-updates-and-a-farewell-to-windows-xp-service-pack-2/comment-page-1/#comment-7571 JCitizen Sat, 17 Jul 2010 02:00:02 +0000 http://krebsonsecurity.com/?p=4028#comment-7571 I know when reinstalling XP, the online updater works better than my SP3 disc. After a full update their(my client's) PC works better than ever! If I would follow all the instructions on the Microsoft site to prepare for the update CD, I'd have a lot of time involved. It takes just as long to download the SP3 online and install it as it does to throw the CD in their and do it that way. It is unbelievable how slow service pack CDs are for XP! It appears from watching the process when using online MS update, that MS has put a lot of really good batch processes into the update when skipping over SP1 & SP2. It works 100% better than it did just 9 months ago! I know when reinstalling XP, the online updater works better than my SP3 disc. After a full update their(my client’s) PC works better than ever!

If I would follow all the instructions on the Microsoft site to prepare for the update CD, I’d have a lot of time involved. It takes just as long to download the SP3 online and install it as it does to throw the CD in their and do it that way. It is unbelievable how slow service pack CDs are for XP!

It appears from watching the process when using online MS update, that MS has put a lot of really good batch processes into the update when skipping over SP1 & SP2. It works 100% better than it did just 9 months ago!

Like or Dislike: Thumb up 1 Thumb down 0
]]> By: Stardance http://krebsonsecurity.com/2010/07/microsoft-security-updates-and-a-farewell-to-windows-xp-service-pack-2/comment-page-1/#comment-7515 Stardance Thu, 15 Jul 2010 08:18:11 +0000 http://krebsonsecurity.com/?p=4028#comment-7515 For what it is worth: I downloaded both FixIt files and ran Fixit50459.msi to disable the protocol. I read somewhere that I would NOT need to run Fixit50460.msi to re-enable the protocol before I ran Microsoft Update, so I didn't. However, when I ran Microsoft Update, if I recall correctly, it offered the Help Center patch and I chose to install it. Now Belarc Advisor lists KB2229593 as installed on my computer on 07/14/2010. I have not examined the Registry or attempted (yet) to use the Help Center. It is not very useful, so I've always thought of it as the Helpknot Center. For what it is worth: I downloaded both FixIt files and ran Fixit50459.msi to disable the protocol. I read somewhere that I would NOT need to run Fixit50460.msi to re-enable the protocol before I ran Microsoft Update, so I didn’t.

However, when I ran Microsoft Update, if I recall correctly, it offered the Help Center patch and I chose to install it. Now Belarc Advisor lists KB2229593 as installed on my computer on 07/14/2010. I have not examined the Registry or attempted (yet) to use the Help Center. It is not very useful, so I’ve always thought of it as the Helpknot Center.

Like or Dislike: Thumb up 1 Thumb down 0
]]> By: Scott http://krebsonsecurity.com/2010/07/microsoft-security-updates-and-a-farewell-to-windows-xp-service-pack-2/comment-page-1/#comment-7513 Scott Thu, 15 Jul 2010 03:46:21 +0000 http://krebsonsecurity.com/?p=4028#comment-7513 Thanks for the links, Brian, JVB, and xAdmin. So xAdmin's and my experiences are similar (the Registry change from the Fixit was not replaced). For completeness, I'll add my experience is not identical to xAdmin: I don't have the “Help and Support” service disabled. But it's beginning to seem like the MS Forum information quoted by JVB and referenced by Brian is wrong - at least, part of the time, anyway. Thanks for the links, Brian, JVB, and xAdmin.

So xAdmin’s and my experiences are similar (the Registry change from the Fixit was not replaced). For completeness, I’ll add my experience is not identical to xAdmin: I don’t have the “Help and Support” service disabled.

But it’s beginning to seem like the MS Forum information quoted by JVB and referenced by Brian is wrong – at least, part of the time, anyway.

Like or Dislike: Thumb up 2 Thumb down 0
]]> By: xAdmin http://krebsonsecurity.com/2010/07/microsoft-security-updates-and-a-farewell-to-windows-xp-service-pack-2/comment-page-1/#comment-7511 xAdmin Thu, 15 Jul 2010 02:01:00 +0000 http://krebsonsecurity.com/?p=4028#comment-7511 Awesome! I got one "Dislike" already! I absolutely love this rating system. It sure would be a very interesting case study in psychology why people choose Like or Dislike! haha ;) Hidden due to low comment rating. Click here to see.

Poorly-rated. Like or Dislike: Thumb up 2 Thumb down 9
]]> By: xAdmin http://krebsonsecurity.com/2010/07/microsoft-security-updates-and-a-farewell-to-windows-xp-service-pack-2/comment-page-1/#comment-7510 xAdmin Thu, 15 Jul 2010 01:32:00 +0000 http://krebsonsecurity.com/?p=4028#comment-7510 My Windows XP setup includes having the "Help and Support" service disabled (practice of disabling unneeded services to reduce the attack surface of the system), which actually provided somewhat of a mitigating step against the exploit before the patch. I never did run the FixIt tool, rather I manually did what the tool does and backed up the registry key (HKEY_CLASSES_ROOT\HCP) before deleting it. Because of that, I was offered the patch on Microsoft Update, which installed without needing a reboot because the aforementioned service was disabled. A win-win! :) The patch actually just installs a new version of the file "Helpsvc.exe" and doesn't restore the registry key deleted via the FixIt tool. That's why if you want the Help and Support functionality fully restored, you need to restore the registry key. Since I don't need the functionality, I'm leaving it deleted. The FixIt tools and file information on the patch can be found here: http://support.microsoft.com/kb/2229593 My Windows XP setup includes having the “Help and Support” service disabled (practice of disabling unneeded services to reduce the attack surface of the system), which actually provided somewhat of a mitigating step against the exploit before the patch.

I never did run the FixIt tool, rather I manually did what the tool does and backed up the registry key (HKEY_CLASSES_ROOT\HCP) before deleting it. Because of that, I was offered the patch on Microsoft Update, which installed without needing a reboot because the aforementioned service was disabled. A win-win! :)

The patch actually just installs a new version of the file “Helpsvc.exe” and doesn’t restore the registry key deleted via the FixIt tool. That’s why if you want the Help and Support functionality fully restored, you need to restore the registry key. Since I don’t need the functionality, I’m leaving it deleted.

The FixIt tools and file information on the patch can be found here:

http://support.microsoft.com/kb/2229593

Like or Dislike: Thumb up 3 Thumb down 3
]]> By: BrianKrebs http://krebsonsecurity.com/2010/07/microsoft-security-updates-and-a-farewell-to-windows-xp-service-pack-2/comment-page-1/#comment-7508 BrianKrebs Thu, 15 Jul 2010 00:22:32 +0000 http://krebsonsecurity.com/?p=4028#comment-7508 Yep. And I updated this post earlier with a link to that same forum post. Yep. And I updated this post earlier with a link to that same forum post.

Like or Dislike: Thumb up 3 Thumb down 0
]]> By: JBV http://krebsonsecurity.com/2010/07/microsoft-security-updates-and-a-farewell-to-windows-xp-service-pack-2/comment-page-1/#comment-7507 JBV Thu, 15 Jul 2010 00:19:08 +0000 http://krebsonsecurity.com/?p=4028#comment-7507 Don't be afraid - "social" is just part of the Forum's address. The full address is: http://social.answers.microsoft.com/Forums/en-US/vistawu/thread/b73edfcb-f7d1-429c-8d16-9c6d73d73a54 Don’t be afraid – “social” is just part of the Forum’s address. The full address is:

http://social.answers.microsoft.com/Forums/en-US/vistawu/thread/b73edfcb-f7d1-429c-8d16-9c6d73d73a54

Like or Dislike: Thumb up 1 Thumb down 1
]]> By: Scott http://krebsonsecurity.com/2010/07/microsoft-security-updates-and-a-farewell-to-windows-xp-service-pack-2/comment-page-1/#comment-7506 Scott Wed, 14 Jul 2010 23:17:52 +0000 http://krebsonsecurity.com/?p=4028#comment-7506 Rob: A link to the home page of the MS forums is not helpful. You needed to post the full link. I've tried both Google and Bing, and cannot find the entry you quoted. The word "social" in their web site name scares me; without being able to read the original post so I can judge it, your info here is just heresay or rumor to me, some random person's wild guess, but not trustworthy. All I can say is: on my own XPP-SP3 system, the update was offered and installed, and both before the offer, and after the installation, the HCP protocol was not present in my Registry. Rob: A link to the home page of the MS forums is not helpful. You needed to post the full link. I’ve tried both Google and Bing, and cannot find the entry you quoted. The word “social” in their web site name scares me; without being able to read the original post so I can judge it, your info here is just heresay or rumor to me, some random person’s wild guess, but not trustworthy.

All I can say is: on my own XPP-SP3 system, the update was offered and installed, and both before the offer, and after the installation, the HCP protocol was not present in my Registry.

Like or Dislike: Thumb up 2 Thumb down 2
]]> By: Rob http://krebsonsecurity.com/2010/07/microsoft-security-updates-and-a-farewell-to-windows-xp-service-pack-2/comment-page-1/#comment-7504 Rob Wed, 14 Jul 2010 21:30:55 +0000 http://krebsonsecurity.com/?p=4028#comment-7504 I only downloaded & installed the Enable Fixit & later just allowed the latest Windows updates to XP Home. I found that neither the Enable nor Disable Fixits are available on the original link (kb/2219475). from - http://social.answers.microsoft.com/Forums/ "Long story, short version: The KB2219475 update released yesterday is Fix It #50459. If Windows Update doesn't offer KB2219475 to your computer, it doesn't need it (i.e., because you ran the Fix It earlier)." I only downloaded & installed the Enable Fixit & later just allowed the latest Windows updates to XP Home. I found that neither the Enable nor Disable Fixits are available on the original link (kb/2219475).

from – http://social.answers.microsoft.com/Forums/
“Long story, short version: The KB2219475 update released yesterday is Fix It #50459. If Windows Update doesn’t offer KB2219475 to your computer, it doesn’t need it (i.e., because you ran the Fix It earlier).”

Like or Dislike: Thumb up 2 Thumb down 0
]]> By: jerry http://krebsonsecurity.com/2010/07/microsoft-security-updates-and-a-farewell-to-windows-xp-service-pack-2/comment-page-1/#comment-7503 jerry Wed, 14 Jul 2010 20:06:27 +0000 http://krebsonsecurity.com/?p=4028#comment-7503 Updated two pc's to sp3. Very time consuming. Had 55 WU patches after applying sp3 to one pc and on the other pc, I tried to install sp3 twice, it stalled both times and had to wait for it to undo itself back to sp2. Finally got it installed via safe mode. That pc only had 5 WU patches post sp3. Wonder if safe mode had anything to do with that. Updated two pc’s to sp3. Very time consuming. Had 55 WU patches after applying sp3 to one pc and on the other pc, I tried to install sp3 twice, it stalled both times and had to wait for it to undo itself back to sp2. Finally got it installed via safe mode. That pc only had 5 WU patches post sp3. Wonder if safe mode had anything to do with that.

Like or Dislike: Thumb up 2 Thumb down 0
]]>