I'm Seriously Hacked Off With Viruses.

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

JamesCRocks

Thread Starter
Joined
Jul 7, 2003
Messages
174
As someone who regularly has to build servers it is extremely frustrating to get infected with Blaster and its ilk whenever I build a config, so much so that I've take to building templates of various standard systems we have. But we still get the problem when building the template so it occurred to me that I apply a set of standard patches and applications to create my company build e.g. Win2K SP3 (SP4 causes problems which is why we haven't adopted it yet), specific driver updates, I.E. 5.5, anti-virus and I realised that I could prevent infection (to my knowledge completely) if I don't assign the system an IP (there's no DHCP in our machine room) and supply all of it's updates on a CD.

That's fine as far as it goes but one important part of the update procedure is using the windows update site which, of course, requires an IP address to be assigned at a point when the system is not fully protected.

So the question is ... does anyone know how I can download the most common security patches and NOT install them there and then (actually whilst writing this I've come up with the idea of checking what's installed on a fully patched machine, relating that to the MS Knowledgebase and d/loading the fix from, there) burning them to a CD.

Anyway, my idea aside, any other ideas gratefully received :)
 

dvk01

Retired Moderator Retired Malware Specialist
Joined
Dec 14, 2002
Messages
56,452
First Name
Derek
This is how M$ say to do it.

1.Go to the Windows Update web site.
2.In the left pane, under Other Options, select “Personalize Windows Update”.
3.Under “Set Options for Windows Update”, select the checkbox for “Display the Link to Windows Update Catalog under ‘See Also’”, then click “Save Settings”.
4.Go back to the Windows Update web site.
5.In the left pane, under “See Also”, select “Windows Update Catalog”.
6.Select “Find Updates for Microsoft Operating Systems”.
7.Select the operating system and language of your choice.
8.Select “Critical Updates and Service Packs”.
9.Select all of the patches you’d like to download, then click on “Go to download basket” to download them.

then save them in a suitable folder on your computer and burn to disc to install on all your different machines
 
Joined
Jul 29, 2001
Messages
21,334
The service packs have all of the latest hot fixes as part of the compilation. Just get the latest SP and the latest hot fixes available after the SP release. If you are firewalled what is the problem of giving the server a LAN IP address until the build is done and changing it or removing the networking when you take it to install. Ever thought of using SMS on the network?
 

JamesCRocks

Thread Starter
Joined
Jul 7, 2003
Messages
174
Hi Derek,

Thanks a lot for that advice ... I will do it at work tomorrow :)

Rockn: Thanks mate, however I can't apply SP4 (the latest service pack) as it causes issues with the McAfee virus scanner which is our company standard (particularly on Citrix based machines).
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Members online

Top