Results 1 to 7 of 7
  1. #1
    3 Star Lounger
    Join Date
    Apr 2002
    Location
    UK
    Posts
    298
    Thanks
    6
    Thanked 0 Times in 0 Posts

    I'm Seriously Hacked Off With Viruses.

    As someone who regularly has to build servers it is extremely frustrating to get infected with Blaster and its ilk whenever I build a config, so much so that I've take to building templates of various standard systems we have. But we still get the problem when building the template so it occurred to me that I apply a set of standard patches and applications to create my company build e.g. Win2K SP3 (SP4 causes problems which is why we haven't adopted it yet), specific driver updates, I.E. 5.5, anti-virus and I realised that I could prevent infection (to my knowledge completely) if I don't assign the system an IP (there's no DHCP in our machine room) and supply all of it's updates on a CD.

    That's fine as far as it goes but one important part of the update procedure is using the windows update site which, of course, requires an IP address to be assigned at a point when the system is not fully protected.

    So the question is ... does anyone know how I can download the most common security patches and NOT install them there and then (actually whilst writing this I've come up with the idea of checking what's installed on a fully patched machine, relating that to the MS Knowledgebase and d/loading the fix from, there) burning them to a CD.

    Anyway, my idea aside, any other ideas gratefully received :-)

  2. #2
    Platinum Lounger
    Join Date
    Nov 2001
    Location
    Vienna, Wien, Austria
    Posts
    5,009
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: I'm Seriously Hacked Off With Viruses.

    There used to be a Corporate Update site where you could download various patches etc in tot - for multiple deployment. I have not checked all the detail as to how this has devolved post-Blaster, but it's worth running through a Search Engine. HTH
    Gre

  3. #3
    Plutonium Lounger
    Join Date
    Nov 2001
    Posts
    10,550
    Thanks
    0
    Thanked 7 Times in 7 Posts

    Re: I'm Seriously Hacked Off With Viruses.


  4. #4
    Platinum Lounger
    Join Date
    Nov 2001
    Location
    Vienna, Wien, Austria
    Posts
    5,009
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: I'm Seriously Hacked Off With Viruses.

    I had seen this, but had not dug further. There used to be a feature on the "old" site that enabled you to track which updates you had previously downloaded; saving a fair bit of record-keeping. This seems now to have <img src=/S/crybaby.gif border=0 alt=crybaby width=15 height=15> disappeared.
    Gre

  5. #5
    Silver Lounger
    Join Date
    Apr 2001
    Location
    New York, New York, USA
    Posts
    2,328
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: I'm Seriously Hacked Off With Viruses.

    1. To download any updates for Windows operating systems, visit Windows Update Catalog

    2. How to Install Multiple Windows Updates or Hotfixes with Only One Reboot

    3. For more information: Hotfix.exe Program Description and Command-Line Switches

    4. Note: some updates use different switches (for example, 828026). Use /n /quiet /passive /norestart switches in your BAT file.

  6. #6
    Gold Lounger
    Join Date
    Feb 2003
    Location
    Wardrobe Malfunction Junction, Derry
    Posts
    2,953
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: I'm Seriously Hacked Off With Viruses.

    "So the question is ... does anyone know how I can download the most common security patches and NOT install them there and then (actually whilst writing this I've come up with the idea of checking what's installed on a fully patched machine, relating that to the MS Knowledgebase and d/loading the fix from, there) burning them to a CD."

    As unk says you can do this at the WUp Corporate site:

    Win Up Corporate Site and as the WUp FAQ's state:

    "Why can't I download Updates from the Windows Update Web site and save them to disk so I can install them later or on another computer?

    The decision to combine component download and installation on the Windows Update site was driven by the desire to create a seamless, hands-free update process for home users. However, we agree that there is a need to be able to download files without installing, so that they can be installed at a later date or redistributed within an organization. To address this issue, we have created the Windows Update Corporate site, geared towards IT Managers and other users who need access to downloadable and redistributable components."


    I think there is an easier better way:

    Complete Security Bulletin List

    Hotfix Update List; Search and Link for Newsletter

    If you want to go the WinUp route, here is a list of support and information Lounge threads:

    Post 288653

    SMBP

  7. #7
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,594
    Thanks
    5
    Thanked 1,059 Times in 928 Posts

    Re: I'm Seriously Hacked Off With Viruses.

    Check out Software Update Services. You set up a server to download the critical updates then direct the 'client' machines to get them from the update server.

    joe
    Joe

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •