Home › Forums › Archives › Computer Support › Computer Support Discussion › Windows Service Pack 2
- This topic has 12 replies, 10 voices, and was last updated 22 years ago by
amy_d_g.
-
AuthorPosts
-
September 5, 2004 at 12:22 am #8694
bronxy
MemberHello:
I have a Tosbiba Laptop
Windows XP Home Edition
Windows Service Pack 2I recently installed SP2, and one day I kept my computer on all nite
next morning my computer was offAlthough I kept it on last night and it didnt do that.
I was just playing a game, and my laptop immeditatley shut it self off. The whole thing just shutdown.
I have not had this problem since installing Service Pack 2Does anyone know why this could be happening?
thanks
September 5, 2004 at 1:27 am #72985kyuubi
Memberhmmm…that’s intersting…have you ran a virus check?..spyware?….
September 5, 2004 at 1:38 am #72980Someguy03
MemberSP2 has been known to make your computer unstable, if your experiencing problems, I would uninstall it from the Add / Remove programs menu and wait until micorosft releases some hot fixes.
And what game crashed on you?
September 5, 2004 at 1:41 am #72986kyuubi
MemberI don’t know…SP2 have been mighty fine for me..no crashes whatsoever…yeah…the better question is what game crashed on you…I remeber once when I was playing C&C Generals with a really crappy graphic card, the computer just basically shut downed on me…so…
September 5, 2004 at 1:50 am #72979David
ParticipantAre you sure your laptop’s CPU isn’t overheating? I’d just uninstall SP2 for now.
September 5, 2004 at 2:18 am #72981bronxy
Membermy computer is pretty hott
maybe it just overheatedi ran virus scans, and nothing came up
i also just ran my adware remover and it removed some hack reg files, maybe that had something to do with it.
lol, I was playing PGA Golf 2004
September 5, 2004 at 5:29 pm #72987amy_d_g
ParticipantMine just did the same thing last night… playing yahoo spades and listening to an mp3 cd and BAM it just shut off. I found this forum that talks about hp laptop users having this problem (mine is an hp) but it does’nt seem to be a SP2 problem… my guess is it overheated, I propped mine up a bit to get a little air flow under it and it seems fine now. There’s also laptop coolers available, I was thinking about getting one. Anybody know anything about those?
September 5, 2004 at 8:02 pm #72977Jeff Hester
KeymasterI’m running XP Pro/SP2 on an IBM T40 laptop with no problems so far (after about a week of nearly continuous use). I typically leave it running overnight.
Overheating sounds like the most plausible explanation. You might also try to reproduce the problem by running the same collection of programs. If it’s not reproducible, that would tend to point towards some other (non-SP2 related) problem.
September 6, 2004 at 8:14 am #72976Jeff Hester
Keymasterfound this today you might be of interest to some of you 😮
Flaws in SP2 security features
Author: Jürgen Schmidt, heise Security
Date: August 13,2004
English Version: http://www.heise.de/security/artikel/50051Overview
With Service Pack 2, Microsoft introduces a new security feature which warns users before executing files that originate from an untrusted location (zone) such as the Internet.There are two flaws in the implementation of this feature: a cmd issue and the caching of ZoneIDs in Windows Explorer. The Windows command shell cmd ignores zone information and starts executables without warnings. Virus authors could use this to spread viruses despite the new security features of SP2.
Windows Explorer does not update zone information properly when files are overwritten. So it can be tricked to execute files from the internet without warning.
Background
Internet Explorer and Outlook Express mark files that are downloaded from the internet or saved from an e-mail with a Zone Identifier (ZoneID), which reflects the security zone from which it originates. The ZoneIDs correspond to the Internet Explorer security zones. This information is saved in an Additional Data Stream (ADS) of the file. ADS are a feature of the NTFS filesystem. ADS with ZoneIDs are named Zone.Identifier and can be viewed and modified with Notepad by opening “:Zone.Identifier”.When a user tries to execute a file downloaded from the internet and therefore has been given ZoneID=3 at a later point, he is prompted with a warning. The ADS is persistent even if the file is moved, as long as it stays on NTFS drives. Windows built-in ZIP utilities honor ZoneIDs and for example do not extract executable files from archives with a ZoneID greater than or equal to 3.
1. The cmd Issue
DescriptionThe command shell cmd.exe ignores the ZoneID of files. The command
cmd /c evil.exe
executes the file evil.exe without warning, regardless of its ZoneID. Even worse: If an executable file is saved as evil.gif, the command
cmd /c evil.gifwill launch the programm without any warning despite its ZoneID being 3. This is true for any file extension. The execution of files through cmd regardless of its extension is not new in SP2. It works with every version of Windows XP.
Note: By default users are not allowed to save “dangerous” files (i.e. files with extensions like .exe) in Outlook Express. But they can save executables with other file extensions such as .gif. Explorer and Outlook Express display them as image. Opening (i.e. double clicking) those files in Explorer results in the launch of the registered file handler, in this case the image viewer.
Attack vector
Exploitation of this issue reqeuires some user interaction — at least as long as nobody comes up with a way to execute cmd.exe with parameters from within Outlook Express or Internet Explorer. But viruses doing “social engeneering” are a common place by now. Bagle & Co asked users to enter a password to decode encrypted attachments. Therefore a virus author could create an e-mail worm like this:
Attached: access.gif
Hello,
attached you find the copy of your access data you
requested. For security reasons, the file is scrambled
and can only be viewed with cmd. To view it, save the
attached file, execute “cmd” from the start menu,
drag&drop the file into the new window and hit
return. cmd will descramble the file for you.If the user follows these instructions, the attached file is executed without any warning.
This might even deceive some of the more experienced users, because they do not expect files with extensions like “gif” to carry executable content and to be executed in such a simple manner.
Additionally this method will evade some antivirus software, which only scans/blocks files with extensions which it knows to be potentially dangerous.
September 9, 2004 at 12:28 am #72982Spike
MemberDoes everyone have SP2? I don’t. Why is it that there are no Automatic Updates for me, and when I check Windows Update, there’s also nothing. Where is Service Pack 2???
September 9, 2004 at 11:29 am #72978Brian
MemberQuote:quote:Originally posted by spike
Does everyone have SP2? I don’t. Why is it that there are no Automatic Updates for me, and when I check Windows Update, there’s also nothing. Where is Service Pack 2???Yes I got SP2. I don’t know what went wrong on your side. Try this link: http://v5.windowsupdate.microsoft.com and see if you get any.
September 9, 2004 at 10:23 pm #72983Spike
MemberI’ve tried Windows Update many times, but nothing comes up. I finally said screw it, and ordered a free cd.
September 9, 2004 at 10:35 pm #72984Tropical
MemberTry turning off your screensaver if you have one. My computer has SP1 but when I have any sort of screensaver and I leave my computer for a while. it’ll turn off with no warning at all.
-
AuthorPosts
- You must be logged in to reply to this topic.