Slashdot Mirror

Have you heard of WGA Notifications? Every time you boot your computer it phones home to Microsoft and sends information about your computer. Every time you install Microsoft updates it phones home to Microsoft and sends information about your computer. If you Windows Update it sends information about your computer and forces you to install the wgatray spyware.

This is why I no longer use Windows Update. I use AutoPatcher (for existing installs) or RyanVM Update Packs (integrates into the cd, I use this for new installs. "RyanVM WGA Addon" contains the wga spyware).

Also, you should block the following domains at your router:

genuine.microsoft.com
mpa.one.microsoft.com
wpa.one.microsoft.com
wustats.microsoft.com

If you're using SquidGuard or similar, you should block or rewrite the following URLs:

http://go.microsoft.com/fwlink/?LinkId=74005
http://runonce.msn.com/runonce2.aspx
http://www.microsoft.com/genuine/

If you have this spyware installed, XP AntiSpy can remove it.

Check out XP-AntiSpy at http://www.xp-antispy.org/. Lots of nice hidden settings all in one page. :D

xp anti-spy http://www.xp-antispy.org/ has a few settings like -- among them, disabling the SP2 security center.

XP Sp2 limiting the number of connection/sec This feature/function can be handy from security point of view. Bink.Nu links to a functionality in Windows XP SP2 that limits conncurrent TCP/IP connections. I vaguely remember reading some relating when I was using Windows 2000 as well about a setting in registry where we can limit the number of TCP/IP Connections. On Googling I found the following link and on this forum . You can save your computer from P2P programs trying to make many connections at the same time and this can also apply to some of the viruses and worms.

The first FIVE installs on any Windows system are in that order:

- a personal firewall, because you need one in order to connect an unpatched system to the net and survive
- all applicable service packs and security patches, approximately the size of the original OS install
- Antispy
- Ad Aware
- Anti Virus Program

That being finished, four hours later if you don't happen to have a prepared ghostable image, you can begin to actually install useful stuff.

... but doesn't *everyone* disable/uninstall messenger service? Even tho I'm a huge fan of Linux, it doesn't mean I don't know my way around windows. Whenever I setup a new XP machine (for anyone), or advise someone on setting up a new machine, I have 3 requirements: no spying(adaware, xp anti-spy), no viruses (virus software like avg, mcaffee or norton), and a firewall (either hardware or software, like black ice, tiny personal firewall, which they used to give out ver 2 of for free.) I also don't trust the firewall that comes with XP, looks like a tiny stateful firewall, which doesn't block outbound connections, so someone with a virus can still spread it.

I just went looking for XP Anti-Spy and the german site looks like its down or changed, but this looks like it might be the newest version. These are all options which should be standard with Windows, or at least steer the customers in the right direction (using other companies' products, instead of something recommended/influenced by MS).

Everyone knows there's a bit of hardening that needs to be done to Linux/Unix systems... what about hardening for Windows systems? Many folks will argue "it's not for normal joes" but I'm sure sooner or later it will become part of standard practice. Do you think seatbelts were a major concern with the first automobiles? How many people jump in their car now and fasten it without even thinking of it?

Also, this kind of makes me think about the useless network activity my XP box (bleh) tries to send out.

Try XP-AntiSpy