A new update from MS

[Larry_OHF]

I just got this auto-update today, and wanted to see if it would invoke any responses from y'all.

Windows Malicious Software Removal Tool - September 2005

After the download, this tool runs once to check your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove any infection found. If an infection is found, the tool will display a status report the next time you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center or run an online version from microsoft.com. This tool is not a replacement for an anti-virus product. To help protect your computer, you should use an anti-virus product

[ 09-14-2005, 09:25 AM: Message edited by: Larry_OHF ]

[RoSs_bg2_rox]

Yep, just saw this auto-update today aswell. I got an email a while ago about this, I can't remember what it was from (which is annoying) but I think it was from MSN plus, a petition asking to be signed, as this would uninstall it, as it has some form of spyware which is needed to run it. Haven't tried it myself though, and since I don't switch my computer off, it'l probably only get tested once a month anyway.

[Iron Greasel]

I installed it. Hasn't done anything yet. Good thinking on their part, though, we'll probably have less zombies around with something like this.

[Felix The Assassin]

This thing is nasty! I ran the download, did the reboot, and Wham, took down my firewall, un-enabled my AV, unprotected my IP address, and released my router configuration.
Needless to say I've been running the 'Penguin' since. Rebooted to WinXp today, and reset everything. I could not believe what all had happened. And M$ says they are only trying to make it 'safer', my arse. Taking down my firewall ain't exactly safe in my book, much less changing my ISP and router!

[Chewbacca]

Originally posted by Felix The Assassin: This thing is nasty! I ran the download, did the reboot, and Wham, took down my firewall, un-enabled my AV, unprotected my IP address, and released my router configuration. Needless to say I've been running the 'Penguin' since. Rebooted to WinXp today, and reset everything. I could not believe what all had happened. And M$ says they are only trying to make it 'safer', my arse. Taking down my firewall ain't exactly safe in my book, much less changing my ISP and router!

F'ing Microsoft! They have included this in their updates for months now AFAIK. I didn't notice it was opening all doors and windows!

What do you mean by "released router configuration"? Is that tough to fix?


Also anybody know if you can unplug and run this or does it require the wide-open connection to work?

[Felix The Assassin]

Chewy, AFAIK this was a WinXp update from the auto updater, and was earlier this month. The more I read about it, the more I'm weary.

After first running it, and cleansing your rig, reboot again to regain control of your firewall, AV etc. Would have been nice to have seen that prior to downloading it. However, it you have security settings it does not like, it will reset them!

I run multiboot on this rig, and the spousal unit runs Dell proprietary on her rig. Both nodes showed the same after effects. Under the 'Felix Home Security Plan' I run DSL router, set to static ISP, then router, set to DHCP ISP, then both rigs, set by gateway address to the router, and detached using private IP addressing.

This new 'fix' does not have enough AI to understand the whole concept. Only that having a static IP is bad, so it fixed it for me. It released my router configuration to my modem, therby, insuring I would not have a static IP, along with my own private address. So, now then I had an IP derived from my ISP assigned to my modem, then sub assigned to the router. Or, what 'most' folks have in their home under default configuration.

If you are set by default, then you have no issue. However, if you have manually configured your network, then go back and check it's current setting to your logged settings.

At this point in time, there is no going back. Well, there is, but it envolves either a 'restore' which Ish Kabob despies, or a complete rebuild, which is not too far in the future anyhow.

[Larry_OHF]

I do not understand why it would screw up one person's configuration and not another's...

I still have Avast running fine, still have my router working fine, and I do not even see a change in anything on my PC. What's the difference that caused me to not see anything go wrong?

Edited-in note: I just looked into the Security Center on WinXP, and it says that it recognizes what Avast is, but I have the box check in recommendations saying that I will monitor it myself. If I were to uncheck it, I would be turning Avast over to MS, which is not going to happen. Still, I am cleared with the AV and Firewall, and as I have said, the router is fine too. I think...

[ 09-18-2005, 12:47 AM: Message edited by: Larry_OHF ]

[Felix The Assassin]

Firstly, I do not run default. So, all of my manual settings were re-set. I run a static IP = remains constant, by choice. M$ says /thinks this is bad, therefore reset to 'DEFAULT" setting, which is ISP automatic provided, and changes every connection except cable. No biggie, except personal preference. In order to make these changes it had to disrupt my firewall, since a firewall is software, and controlled by M$ therefore, I got the software deactivation notice, whilst this program did it's 'magic' I use Norton CE, therefore both components had to be dissabled, firewall and AV. Problem was, they were not Re-Activated, and I had to reboot to regain control.

If you chose not to run default, then you should have your numbers logged somewhere. Pull them out and d ot he following, when typing "do not" include the "

Open a Run prompt, type "cmd" then hit enter.
Now you have a black DOS box, with M$ version etc, along with a C:> prompt. Next to the last > from the C:> prompt, type "ipconfig" hit enter.
Hardware depent you will be looking at all of your hardware connected to the internet. And will see your ISP, IP, Default gateway etc. Your modem will show connection specific DNS setting, if you see the word or phrase about automatic tunneling then you are set to DEFAULT. Automatic IP addressing from your ISP on every connect.

Me being different, had a manual configuration, in which this update did not like, and "Fixed" it for me! [img]graemlins/finger.gif[/img]

When you are done viewing, type "exit" and hit return.