Security measures to take when installing or updating?

I've heard from several people that it is possible to get hacked within minutes of installing Windows, while retrieving updates (this actually happened to someone I know... he was actually "lucky" that the hacker posted a terminal window informing him with a message that read "gotcha"). The vulnerable state isn't surprising, considering that the OS is years behind, with security patches missing in its initial state, prior to getting updates.

Thus, during updates, I make sure my Windows Firewall & Defender are running, and I don't surf the internet (that said, the Updates process itself is dependent on using IE, which is out-of-date). I also disable RDP, sharing, netbios, and even IPv6.

What other some other recommendations for improving security?

For one, I know that it helps to use Windows 7 with SP3 included. Is it possible to pre-download (via another computer) other pieces as well, such as NET, security patches, or the latest IE version?

I would install/run an anti-virus, but a Microsoft rep told me it's better to wait until the Windows "foundation" (NET & other updates) have been laid down, since some of the antivirus software's components might prefer to build onto it. Is that true?

wwjd said:

I've heard from several people that it is possible to get hacked within minutes of installing Windows, while retrieving updates (this actually happened to someone I know... he was actually "lucky" that the hacker posted a terminal window informing him with a message that read "gotcha"). The vulnerable state isn't surprising, considering that the OS is years behind, with security patches missing in its initial state, prior to getting updates.

Thus, during updates, I make sure my Windows Firewall & Defender are running, and I don't surf the internet (that said, the Updates process itself is dependent on using IE, which is out-of-date). I also disable RDP, sharing, netbios, and even IPv6.

What other some other recommendations for improving security?

For one, I know that it helps to use Windows 7 with SP3 included. Is it possible to pre-download (via another computer) other pieces as well, such as NET, security patches, or the latest IE version?

I would install/run an anti-virus, but a Microsoft rep told me it's better to wait until the Windows "foundation" (NET & other updates) have been laid down, since some of the antivirus software's components might prefer to build onto it. Is that true?

I suppose if the first thing you did was log in to some hacker or XXX site site it may be possible. The odds of anything but some malware when doing normal internet activities is very remote.

After installing Windows, the first thing I install is the AV, then I start updating Windows. After updating Windows, I install the rest of my Security programs and run scans. The only time any infections snuck through during the process was when I made the mistake of trying MSE (MBAM picked them up after MSE not only let them in, it didn't pick up on the during the scan).

wwjd said:

For one, I know that it helps to use Windows 7 with SP3 included. Is it possible to pre-download (via another computer) other pieces as well, such as NET, security patches, or the latest IE version?

There is no SP3 for Windows 7 but this thread may be of interest to you,

TEST -Update 7 installation media