Study: Unpatched PCs compromised in 20 minutes

No_Style · Aug 18, 2004, 03:09 PM

Don't connect that new PC to the Internet before taking security precautions, researchers at the Internet Storm Center warned Tuesday.

According to the researchers, an unpatched Windows PC connected to the Internet will last for only about 20 minutes before it's compromised by malware, on average. That figure is down from around 40 minutes, the group's estimate in 2003.

The Internet Storm Center, which is part of the SANS Institute, calculated the 20-minute "survival time" by listening on vacant Internet Protocol addresses and timing the frequency of reports received there.

"If you are assuming that most of these reports are generated by worms that attempt to propagate, an unpatched system would be infected by such a probe," the center, which provides research and education on security issues, said in a statement.

The drop from 40 minutes to 20 minutes is worrisome because it means the average "survival time" is not long enough for a user to download the very patches that would protect a PC from Internet threats.
_______________
Read More/Source: C|Net Tech News

No_Style · Aug 18, 2004, 03:12 PM

That article is the scary truth. Unfortunately for me, it was more like 5 minutes when I was trying to format my laptop a few months ago. I was constantly attacked by the blaster worm. Now with, SP2 slipstreamed into my unattended install CD, I feel a lot better about formatting with my Ethernet cable plugged in.

Chaos · Aug 18, 2004, 03:51 PM

it is so true. If you are on a cable modem it's even worse. I refuse to connect to the Internet now until I have a firewall and current Anti-virus in place first

**MIG-31** · Aug 18, 2004, 03:57 PM

that is something i would not do myself..... but do have a small fault with my cable modem software...

it recomends upon instalation of av & firewall software to be disabled.....i usually end up signing in(this is straight after a format & install of xp)to configure settings.... disconect modem then install all the av/fw spyware stuff straight after the run the applications to make sure im clean....so far no problems.

its just a pain in the ass,but would prefer it done in a much easier way.

No_Style · Aug 18, 2004, 04:12 PM

It is a pain in the ass. It's one of the reasons why I have copies of my Back Up folder on all 3 of my PCs. It contains all the software/updates needed so I don't need to connect onto the net. It's just as bad on DSL..

I was on Cable Modem for awhile which was when my Laptop was formatted, but I switched to DSL and I was being attacked by 'Gaobot'.. I'm going back to Cable Modem later next month for the increased speed. I hope the virus situation there isn't horrid.

MIG, get SP2 slipstreamed.

It's not necessary to disconnect your modem (for now) with the updates on that.

P.S - Cable Modem Software? If you're running WinXP, no software should be required. Is it essential?

**MIG-31** · Aug 18, 2004, 04:17 PM

Quote:

Originally Posted by No_Style

MIG, get SP2 slipstreamed.

It's not necessary to disconnect your modem (for now) with the updates on that.

P.S - Cable Modem Software? If you're running WinXP, no software should be required. Is it essential?

thanks for that bit of info m8...... this windows install is sp2 slipstreamed....at the expense of three cd's...could not get the boot file installed on the first two.

Chaos · Aug 18, 2004, 04:27 PM

As far as I know the only time you need software installed for a cable modem is if you use the USB interface to connect to your PC. In those cases it will be listed as your Network adapter

**MIG-31** · Aug 18, 2004, 04:30 PM

ENET conection for me,but doe have the option for either ENET or usb conection.

zerodamage · Aug 18, 2004, 04:30 PM

Quote:

Originally Posted by Chaos

As far as I know the only time you need software installed for a cable modem is if you use the USB interface to connect to your PC. In those cases it will be listed as your Network adapter

Not only that but that means you have broadband internet and no hardware firewall which is a big no-no. I've seen computers get hit with the blaster worm on first reboot in less than 2 minutes. It's worth having like a free software firewall on hand to install before putting the system on the internet.

**MIG-31** · Aug 18, 2004, 04:35 PM

Quote:

Originally Posted by zerodamage

Not only that but that means you have broadband internet and no hardware firewall which is a big no-no. I've seen computers get hit with the blaster worm on first reboot in less than 2 minutes. It's worth having like a free software firewall on hand to install before putting the system on the internet.

when your on 750k bb this is something i seriously take into consideration.....i would very much like to install my av/fw before installing my web settings for net access.

krazy1 · Aug 18, 2004, 04:40 PM

This is the PRIME reason I swear by a Hardware firewall rather then software. If I bring my system up it won't get slamed instantly. Yes software firewalls have their place but give me a hardware one any day over software.

Al_Vampyre · Aug 18, 2004, 04:46 PM

Last time I reformatted I got hot while I was updating Norton, about 3 minutes after I hooked up...

edperks · Aug 19, 2004, 01:17 AM

I was getting ready to do a format this weekend in preperation for my new 6800 GT. I will now install with cat5 unplugged and then install my firewall and then go get the update needed. Good Post!!

Aug 18, 2004, 03:09 PM	#1
No_Style Styleless Wonder Join Date: Jun 2002 Location: Ottawa, Ontario Posts: 6,034 Rep Power: 0	Study: Unpatched PCs compromised in 20 minutes Don't connect that new PC to the Internet before taking security precautions, researchers at the Internet Storm Center warned Tuesday. According to the researchers, an unpatched Windows PC connected to the Internet will last for only about 20 minutes before it's compromised by malware, on average. That figure is down from around 40 minutes, the group's estimate in 2003. The Internet Storm Center, which is part of the SANS Institute, calculated the 20-minute "survival time" by listening on vacant Internet Protocol addresses and timing the frequency of reports received there. "If you are assuming that most of these reports are generated by worms that attempt to propagate, an unpatched system would be infected by such a probe," the center, which provides research and education on security issues, said in a statement. The drop from 40 minutes to 20 minutes is worrisome because it means the average "survival time" is not long enough for a user to download the very patches that would protect a PC from Internet threats. _______________ Read More/Source: C\|Net Tech News __________________ "The Best Style Is No Style" Specifications Here

Aug 18, 2004, 03:12 PM	Thread Starter #2
No_Style Styleless Wonder Join Date: Jun 2002 Location: Ottawa, Ontario Posts: 6,034 Rep Power: 0	That article is the scary truth. Unfortunately for me, it was more like 5 minutes when I was trying to format my laptop a few months ago. I was constantly attacked by the blaster worm. Now with, SP2 slipstreamed into my unattended install CD, I feel a lot better about formatting with my Ethernet cable plugged in. __________________ "The Best Style Is No Style" Specifications Here

Aug 18, 2004, 03:51 PM	#3
Chaos Number Nine Join Date: May 2002 Location: Nova Scotia Posts: 5,268 Rep Power: 167 System Specs	it is so true. If you are on a cable modem it's even worse. I refuse to connect to the Internet now until I have a firewall and current Anti-virus in place first __________________

Aug 18, 2004, 03:57 PM	#4
MIG-31 HardwareHeaven News Mod Join Date: Dec 2002 Location: Nottingham,UK Posts: 56,854 Rep Power: 471 System Specs	that is something i would not do myself..... but do have a small fault with my cable modem software... it recomends upon instalation of av & firewall software to be disabled.....i usually end up signing in(this is straight after a format & install of xp)to configure settings.... disconect modem then install all the av/fw spyware stuff straight after the run the applications to make sure im clean....so far no problems. its just a pain in the ass,but would prefer it done in a much easier way. __________________ Please Post Your News Submissions Here

Aug 18, 2004, 04:12 PM	Thread Starter #5
No_Style Styleless Wonder Join Date: Jun 2002 Location: Ottawa, Ontario Posts: 6,034 Rep Power: 0	It is a pain in the ass. It's one of the reasons why I have copies of my Back Up folder on all 3 of my PCs. It contains all the software/updates needed so I don't need to connect onto the net. It's just as bad on DSL.. I was on Cable Modem for awhile which was when my Laptop was formatted, but I switched to DSL and I was being attacked by 'Gaobot'.. I'm going back to Cable Modem later next month for the increased speed. I hope the virus situation there isn't horrid. MIG, get SP2 slipstreamed. It's not necessary to disconnect your modem (for now) with the updates on that. P.S - Cable Modem Software? If you're running WinXP, no software should be required. Is it essential? __________________ "The Best Style Is No Style" Specifications Here

Aug 18, 2004, 04:27 PM	#7
Chaos Number Nine Join Date: May 2002 Location: Nova Scotia Posts: 5,268 Rep Power: 167 System Specs	As far as I know the only time you need software installed for a cable modem is if you use the USB interface to connect to your PC. In those cases it will be listed as your Network adapter __________________

Aug 18, 2004, 04:30 PM	#8
MIG-31 HardwareHeaven News Mod Join Date: Dec 2002 Location: Nottingham,UK Posts: 56,854 Rep Power: 471 System Specs	ENET conection for me,but doe have the option for either ENET or usb conection. __________________ Please Post Your News Submissions Here

Aug 18, 2004, 04:40 PM	#11
krazy1 Live from the Dungeon Join Date: May 2003 Location: Between the SubWoofers Posts: 1,395 Rep Power: 0	This is the PRIME reason I swear by a Hardware firewall rather then software. If I bring my system up it won't get slamed instantly. Yes software firewalls have their place but give me a hardware one any day over software. __________________

Aug 18, 2004, 04:46 PM	#12
Al_Vampyre HardwareHeaven Senior Member Join Date: Jan 2003 Location: Scotland Posts: 1,532 Rep Power: 72 System Specs	Last time I reformatted I got hot while I was updating Norton, about 3 minutes after I hooked up... __________________ "Knowledge is knowing that a tomato is a fruit; wisdom is knowing not to put it in a fruit salad" - Brian O'Driscoll - Ireland Rugby Team 2009 Grand Slam winning Captain.

Aug 19, 2004, 01:17 AM	#13
edperks HardwareHeaven Senior Member Join Date: May 2002 Location: Southern Illinois Posts: 780 Rep Power: 0 System Specs	I was getting ready to do a format this weekend in preperation for my new 6800 GT. I will now install with cat5 unplugged and then install my firewall and then go get the update needed. Good Post!!