How To Avoid Viruses At Windows Install Time?

reallocate writes "Can a home user install and update Windows without being attacked by a virus or worm? I'm a Linux user; have been since 1995. Recently, I needed to install Windows XP Pro on a home desktop machine with a Roadrunner cable connection. I tried twice. Both times, the machine was attacked and rendered unusable before I was able to pull down the first update from Windows Update." Read on for more details of what went wrong and when.

Here's a synopsis of my install method:

1. Put the Windows XP CD in the drive;
2. Disconnect the cable modem from the network card;
3. Reboot and install Windows;
4. The box remains off the net during the entire install: no registering, no setting up an ISP, no activation, no network configuration, no nothing. (BTW, the only networking component that I install is tcp/ip. All the other MS stuff never gets on the machine.)
5. Reboot; Windows runs and all is well;
6. Install the current version of Norton Internet Security Professional from a shrinkwrapped CD (firewall, anti-virus, etc.);
7. Configure the Roadrunner net connection and reboot to pick up a DHCP lease;
8. Launch the Norton update facility (per Norton's recommendation, the built-in XP firewall is turned off);
9. Complete the Norton update and reboot;
10. Launch Windows Update;
11. Start to pull down Service Pack One; per Microsoft's instructions, all firewalls are turned off.

That's as far I got. During the first attempt, I acquired a virus or worm before I could finish the Norton update (machine powered down). On the second attempt, I got as far as Windows Update and SP1(continual rebooting).

So...how would you do it?"

Comments

How do I do it?

[Anonymous Coward]

With LOVE.

Worst case scenario

[gwoodrow]

So the WORST case scenario is that you don't actually succeed in getting Windows installed? Man, talk about a win-win situation!

Re:Its easy...

[vnsnes]

He can either disable the cable modem or unplug the network cable until the OS is up and running.

Re:you need a router

[CrazyGringo]

We should just put the whole internet behind a firewall. Problem solved. :) On a more serious note, can you imagine the kind of trouble we'll have with IPV6? I'll be arrested because my toaster was hijacked and launched a DOS on army.mil

February?

[wcbarksdale]

Windows Security Update CD: February 2004

Updated Date: April 16, 2004

This CD includes Microsoft critical updates released through October 2003

Well, as long as that's clear.

Re:Easy

[bcrowell]

Or, read all the posts about how you can put together some huge, convoluted update CD that's never completely up-to-date instead of just spending $35 on a little hardware firewall.
Well, yeah, but c'mon, there are plenty of ways to do it without spending any extra money on hardware or software. Some possibilities:

• Use Lindows as a substitute for Windows.
• Wait for the next version of Windows. MS says they're making security a top priority now, so I'm sure the next version won't have any vulnerabilities.
• Run DOS -- I don't think anybody is writing viruses that can infect it.
• When your machine gets attacked, look at your log files to see where the attack came from, find out who their ISP is, and then send a polite letter by U.S. mail asking them to make their customer stop behaving badly. Repeat until all the bad, naughty machines are gone from the internet.
• Start your own internet. Only people you trust are invited to join it, and nobody is allowed to link it to the bad, old internet.
• Call MS tech support and ask for help.

OK, I admit that last one was a little silly.

Re:Simple, Get an external Router.

[Anonymous Coward]

Sunday, June 20, 2004 20:31:26 Unrecognized access from 193.227.0.37:3365 to UDP port 1434
Sunday, June 20, 2004 20:45:50 Unrecognized access from 24.164.31.171:8860 to UDP port 1026

^^ RIGHT THERE! That was 14 minutes! You could have EASILY installed a few critical updates. You just need to install them between attacks, and unplug your network cable before each new attack starts.

How hard is that? What is everyone here complaining about?

If you play a Microsft CD...

[Spoticus]

backwards, you can hear satanic messages. But even worse, if you play it forward, it installs their software!

Thanks, I'll be here all week... try the veal...

Re:SP1 From CD

[hawkeyeMI]

Are you sure your wife's not just a pr0n fiend?

Visa

[gmuslera]

• Windows XP Pro Original - US$ 200
• Follow the Microsoft Instructions - US$ 0
• Apply recommended patches by microsoft using microsoft recommended way - US$ 0
• ...
• Getting worms, viruses, and trojans even after all of this work: priceless

and play an *BSD CD forwards

[hughk]

...and you find it full of daemons!!!!

Sorry, I couldn't help it!

Re:OP: The 100% best answer

[Anonymous Coward]

I didn't say it was sexual. They were importing cigarettes with intent to resell.