• MS-DEFCON 2: Where we stand

    Sanda posted this:

    What about KB960715 which was on hold awhile back. It is still being “offered” to me. Do we “do it” or let it still stay on hold? (I may have missed a post about it.)

    I still say hold off. KB 960715 – the killbit patch – breaks many programs. It isn’t worth installing. Microsoft’s next gigantic IE patch should eliminate the need for setting the killbits.

    Bottom line: If you’ve been following along here, and you applied the February patches, hold off on everything available, except the Windows Defender update, the Junk Mail Filter update(s), and the Malicious Software Removal Tool.

    Reader JS writes:

    Woody, I have been slow to move on SP3. Now with this new virus, I wondering whether I should go ahead with the update? I’ve also held off certain updates in the past based on your “stop-light system” and your update listings. I’m not a major computer user….just email, web searches, word processing…the basic stuff. What you think? Love your tech books !!!

    If you haven’t been following along here, and you haven’t applied patches (such as Windows XP Service Pack 3) for a long time, get patched up. Apply every patch out there. And do it now. It’s better to get completely patched than to have one of the “low hanging fruit” security holes present on your system.

    I’m still ambivalent about Windows XP Service Pack 3, in particular: if you’ve been keeping your system patched, it has very little to offer. But if you haven’t patched in many months, you should apply SP3 and everything else you can get your hands on. (Except for hardware driver patches, which are a different can of worms entirely.)

    Once you’ve gotten your system patched, keep an eye out here for the latest updates. It could save you a lot of headache.