[Ham-Computers] RE: Avoiding Malware During Reinstallation

[Hsu, Aaron (NBC Universal)]

Jim,

If you're behind a router, you're safe from most in-bound hacking
attempts - even Sasser and Blaster can't get to your system UNLESS
another computer on your *local* network already has either and is
actively trying to infect other systems.

I wouldn't worry about getting "infected" while you're downloading
updates.  The safest thing to do is to only visit known "safe" sites
while the system is not "protected".  For example, after the base
install of WinXP, use the "Windows Update" button from the "Start" menu
to get the various patches for Windows.  Also install and update your
Anti-virus app.  I'll even go to mozilla.org to get Firefox so I can
safely download additional needed drivers (chipset, sound, video,
network, etc).

My typical setup order:

* Install Windows
* Turn off or configure "phone home" items in Windows:
    Disable MS "Error reporting"
    Disable "Remote assistance invitations"
    Uninstall "SSDP", "UPnP", MSN Explorer, and "Windows messenger"
* Install Chipset drivers
* Install Video, Sound, & Network drivers
* Install "system specific" updates (such as Compaq System Enhancements
for laptops)
* Windows Update (several times until all "criticals" are installed)
* Windows Update (selected "recommended" updates)
* Install Anti-Virus
* Install Firewall
* Customize Windows "look and feel"
* Save default profile
* Install apps


I think I might be missing a step, but you get the general idea.  I'll
probably jinx myself here, but I've never run into any
hacking/malware/virus issues as long as these were done behind a
hardware router/firewall with in-bound blocking.  4500 systems at work
run on images I've built and none have been vulnerable or infected "out
the gate" (so far...).  

GL & 73,

  - Aaron, NN6O


-----Original Message-----
Sent: Saturday, November 12, 2005 11:36 AM
Subject: [Ham-Computers] Avoiding Malware During Reinstallation

*** snip *** 

I'm concerned about malware problems that may occur during the time the 
computer is unprotected. In the past, I obtained info on avoiding the 
Sasser and Gabot viruses, but no doubt other problems have occurred
since them.

Any suggestions?  Jim