The magazine of the Melbourne PC User Group

The End Is Nigh?
Dennis Parsons
 

Dennis Parsons warns Windows 98 users about the potential dangers you may encounter after Microsoft withdraws support in July this year - he assumes you will want to continue using the Internet where exposure to danger is forever increasing.


Many computer users are facing a decision they probably don't even realise they have to make. What to do about their Windows 98, 98SE or ME system? As of 11 July, Microsoft will no longer be providing updates of any type for these operating systems, meaning they will be totally unsupported. At present Microsoft issues updates or "patches" for critical security issues but will stop doing so leaving you potentially vulnerable to malicious activity.

Note: From now on when I use the term "Windows 98" take it to include Windows 98SE and ME.
 
If you're unsure which version of Windows you're using, either read the "splash" screen next time you start the computer, it may appear on the "Start" menu or click: Start | Settings | Control Panel | System.
Information from Microsoft regarding the end of support is available at http://www.microsoft.com/windows/support/endofsupport.mspx.

What Does This Mean?

The good news: you don't have to worry that your computer will stop working -- Microsoft will not and without access could not disable Windows 98. Your system will continue to operate as it currently does, as will other software you have installed. It doesn't mean you need to rush out and spend $1000 on a new system either, although if you've been hankering after an LCD monitor don't let me stop you -- this might be just the excuse you've been looking for! Most of my suggestions are aimed at doing things as cheaply as reasonably possible.
 
  What Is Computer Security?

In simple terms it means preventing other people accessing your computer and being able to do such things as read, write and delete files, sending Spam and e-mail worms or using your Internet connection as a stepping stone to other computers. It means everything from setting a password on your Windows account thus preventing the neighbour’s kids from wandering in and wreaking havoc, to stopping a malicious user taking control of your system via the Internet. This article will focus on the Internet side of things as that’s where the biggest risk lies.
So when phrases such as "security issue" are used it means something that affects the security of your system, potentially allowing a malicious user access to your

The bad news: it makes using the Internet and e-mail riskier activities. Flaws are discovered in software all the time and while most of them are fairly insignificant, occasionally they are not. The worst flaws, the critical security issues, can enable your computer to be controlled by another user over the Internet, giving them full access to your hard drive or letting them use it for spamming or launching attacks on other computers (known as "cracking" but commonly incorrectly referred to as "hacking"). Potentially all from simply visiting a Web site, viewing a picture sent in e-mail or even by just connecting to the Internet if you don't use a firewall.

Microsoft will not be issuing any further patches for Windows 98 and associated software such as the Windows 98 versions of Internet Explorer and Outlook Express. While you'll be as safe on July 11th as you are today, as time goes by the odds are well and truly in favour of a serious security issue being discovered that will affect your system. It’s not a matter of "if" but "when" your system becomes vulnerable.

Have I scared you? Just a little maybe? Hopefully I have because it’s a serious issue and you shouldn't just bury your head in the sand and hope nothing bad happens. Ignoring it won't make the hackers go away.

"What Can I Do About My Windows 98 System?" I hear you ask!

There are a number of options open to you ranging from replacing your computer, to upgrading software and hardware, to continuing largely as you are. Which you choose is up to you -- it will mainly depend on what you are willing to spend, the specifications of your current hardware and how badly you want to continue using Windows 98.

Please note that while I’m vigorously encouraging you to upgrade your operating system I’m not doing so just for the sake of having the "latest and greatest". My only concern here is the security of your system. There are certainly other advantages in my opinion, in having Windows XP but security is the main one.

There is nothing wrong with using older software provided that it doesn't put your system at risk. As of 11 July Windows 98 can no longer promise to meet that requirement. It’s that simple. If you can afford to change, do so.

If you can't or won't change it isn't the end of the world but you will need to change the way you do a few things and avoid activities such as Internet banking. This doesn't just risk the data on your computer but could also compromise your bank account.

Option 1: Upgrade to Windows XP

For most users this is the preferred option, by far, but of course it comes at a price and you need hardware capable of running it. Realistic minimum requirements for running Windows XP, and these cover only basic activities such as word processing, Internet and e-mail, are:

  • 500MHz processor
  • 128MB RAM
  • 4 GB hard drive (with 1.5 GB of free space)
More of each is better but the above system would be adequate for basic activities. Note that not all older hardware (such as printers and scanners) or software will run with Windows XP. Microsoft provides a compatibility tool (the Upgrade Advisor) to help assess the suitability of your system. It will be included on the Melb PC Monthly Disc for May or it can be downloaded, but at 32 MB it is quite large and will take you at least 1 1/2 hours to download using dial-up: http://www.microsoft.com/windowsxp/pro/upgrading/advisor.mspx.

If your system is closer to the following it will almost definitely be able to run Windows XP without a problem:
  • 800MHz processor
  • 256MB RAM
  • 10GB hard drive (with 1.5GB of free space)
On the other hand if your system falls short of the minimum specifications you may be able to add more RAM, install a faster processor or buy a bigger hard drive, but given the age of such a system the parts you buy would be second hand and obtained from a swap meet or a fellow member -- your local computer shop would not normally stock them.

Upgrading to Windows XP should be a fairly painless process and there is even the option of selecting a "classic theme" that makes Windows XP look like Windows 98 for a bit more comfort.

Advantages
  • you'll have a current operating system that is safer,
  • will continue to be patched,
  • can run the latest software
Disadvantages
  • cost of purchasing Windows XP
  • cost of any additional hardware required
  • learning a new operating system
Note: For teachers and students the cheapest way to upgrade to Windows XP is to buy the Academic Upgrade version of Windows XP Pro. The eligibility requirements are fairly broad and can be found here: http://www.microsoft.com/australia/education/howtobuy/meud/studentsandteachers.aspx.

At time of writing it costs approximately $125 but can be bought for a little less. No student ID is required.

Information on upgrading to Windows XP: http://www.microsoft.com/windowsxp/pro/upgrading/default.mspx.

One major advantage in buying Windows XP Pro instead of XP Home is that support is planned to last five years longer for the Pro version, as it’s considered a "business" grade product. Security updates for XP Pro will be available for seven years after the release of the next version of Windows (called Vista), which is rumoured to happen at the end of 2006; thus you will get seven or eight years of life out of your purchase. I doubt you'll still be using the same computer if it is currently running Windows 98. http://support.microsoft.com/lifecycle/?p1=3223, http://support.microsoft.com/gp/lifecycle.

A reasonable budget upgrade system (CPU, RAM, motherboard, hard drive and case) plus Windows XP Pro Academic can be built for about $500. Yes, you could do it for less (about $400) but by spending the extra $100 you get a better system that should last you longer. Add another $100 for DVD burner, mouse and keyboard. At that sort of price you'll need to assemble it yourself (it isn't difficult) or pay for the shop to do it for you.

Used systems are another option but often are not much cheaper than the budget upgrade system above, although they can be. Or you might be lucky and come into possession of a suitable "hand me down".

Option 2: Install an Alternative Operating System

Instead of upgrading to a newer version of Windows you could opt to install an entirely different operating system (OS) such as Linux, although this path probably isn't recommended if you don't like "fiddling" with computers and don't have a "guru" to guide you. Standard installations of mainstream Linux distributions have fairly high hardware requirements, although there are low resource options available if required.

The very light resource distributions such as Damn Small Linux will easily run on a Pentium processor with 32 MB RAM but are somewhat limited -- they will perform basic tasks such as Internet browsing and light word processing adequately but lack many of the features of a mainstream distribution.

A moderate resource solution would be to use Slackware Linux with a lightweight desktop manager such as Fluxbox or Xfce. This will run reasonably well on a Pentium II/233 with 96 MB of RAM.

A full resource solution would be a distribution such as Mandriva or Ubuntu running a GNOME or KDE desktop. Minimum requirements for this would be a 500 MHz processor and 128 MB RAM and as with all computing, more is better.

While not for everyone this is certainly a viable option for the right type of user.

Advantages
  • possibly minimal cost if no new hardware required
  • OS is current and updates continue to be available
  • better security
Disadvantages
  • steep learning curve
  • possible hardware upgrade needed
  • won't easily run most Windows programs
  Damn Small Linux:
Slackware Linux:
Mandriva Linux:
Ubuntu Linux:
http://www.damnsmalllinux.org/
http://www.slackware.com/
http://www.mandriva.com/
http://www.ubuntu.com/

Note: Mandriva is available on the Melb PC Monthly Disc for April 2006 available from the office.

Buying an Apple Mac is also another option but that doesn't exactly fit the aim of keeping the cost as low as reasonably possible, as you would have to buy all new hardware and software, and at a premium

Option 3: Continue to use Windows 98, 98SE or ME

On the surface this is the easiest option, but it is also the least preferred from a system security perspective. Microsoft won't be issuing any more software updates and that leaves your system potentially vulnerable to attack. Software from other suppliers will increasingly be in a similar situation as they stop supporting Windows 98 versions. [Ed: This has already happened with Windows NT4 -- when Microsoft support ended, security vendors slowly began saying "Our product does not work on NT4" and on subsequent updates that was the case -- GT]

For better or worse Windows 98 is old in software terms and with an ever decreasing number of people using it there will be little incentive for software to be written or maintained to support it. Maybe not such a big deal with a word processor as you can keep using it effectively without updates, but it is a big deal with software that must be updated to remain effective, such as your antivirus program.

The measures outlined below rely mainly on software to minimise the risks and so will remain effective only while versions for Windows 98 are available. How long that will be is anyone’s guess.

Eliminating Risk

While it isn't possible to entirely eliminate the risk from as yet undiscovered vulnerabilities, by taking sensible precautions and being vigilant you will reduce that risk as much as possible. Many of these precautions are things you should be doing already such as using antivirus software, while others may well be new such as not using Internet Explorer. Even more than ever, the security of your computer is up to you -- Microsoft will no longer be providing patches for security related vulnerabilities so you have to take all the responsibility for being as safe as you can. Not only is your own system at risk, but if you run an insecure system and it is taken over, your system could be spewing out torrents of Spam or worse, Trojans that will try to take over other systems. You’re potentially a danger to yourself and others.

I won't be teaching you how to use any of the software I mention as that’s far too big a task for even a whole issue of PC Update. Melb PC has a couple of ways you can get help with this -- our internal newsgroups and the Melb PC forum.

Newsgroups: http://www.melbpc.org.au/faq/newsgroups.htm -- an introduction for those unfamiliar with news.
Forum: http://forum.pcupdate.org -- requires registration.

As one of the reasons for not upgrading will be the cost involved, all of the software I mention will be free or have free versions. Meaning there is no excuse for not doing the right thing!

Most of the software mentioned here is available on the Melb PC Monthly Disc which will help reduce the amount you need to download if that worries you, noting that it’s always wise to check online for more recent versions and updates.
  1. Ensure you've installed all available Windows updates. Visit this Web site to check: http://windowsupdate.microsoft.com/.

  2. Run anti-virus software and keep it updated. You can choose from one of the many commercial programs available or there are several free ones:
    AntiVir: http://www.free-av.com/
    AVG: http://free.grisoft.com/
    Avast!: http://www.avast.com/eng/avast_4_home.html.

  3. Run anti-spyware software and keep it updated. There are a couple of free ones available and I suggest you use both of them as each has different strengths and detecting spyware can be a tricky task for software:
    Ad-Aware: http://www.lavasoft.com/software/adaware/
    Spybot Search & Destroy: http://www.safer-networking.org
There are numerous bogus programs available, many of which use aggressive marketing techniques such as popping up out-of-the-blue and claiming your system is infected with spyware and so on. Ignore them as often they contain spyware themselves and, like spam, you don't want to encourage such advertising methods. If you do want to use another program be sure it’s legitimate -- seek the opinion of a knowledgeable third party, or a review in a computer magazine, or ask questions in the Melb PC newsgroups or forum.
  1. Use a firewall. This will help keep intruders out and if you do happen to "catch" something nasty, your firewall should reveal this when the malware program tries to connect to the Internet. Again there are free firewalls available:
    ZoneAlarm: http://www.zonelabs.com/
    Kerio: http://download.kerio.com/dwn/kpf/kerio-pf-2.1.5-en-win.exe
Note that some of the commercial antivirus products come as part of a larger security package which may include a firewall so you may already have one installed. These "bundled" products are probably best avoided on older systems as they often install a number of components that can slow down such a system.
  1. Stop using Internet Explorer and Outlook Express. Microsoft won't be updating them and newer versions don't run on Windows 98. If you use the Internet you must use secure and up-to-date browsers and e-mail programs or you're leaving the door wide open for malicious software to set itself up and run on your system.
These programs are updated regularly, often to fix security issues, so you must check their Web sites regularly for updates, or use the update function if the program has it.

Replacement Browsers:
Mozilla Firefox: http://www.mozilla.com/?refox/
Opera: http://www.opera.com/.

Replacement e-mail programs:
Mozilla Thunderbird: http://www.mozilla.com/thunderbird/
Eudora: http://www.eudora.com/ -- the "light" and "sponsored" modes are free.

Don’t Explore with Explorer

I can't stress this enough -- Internet Explorer cannot be trusted when run on Windows 98 -- so don't use it unless you absolutely must use it for a particular Web site. Use it for those sites only and when you're finished, close it down. Do not continue browsing with it -- start up an alternative browser.

This is particularly the case if you visit the "seedier" side of the Internet -- online gaming, "warez" software sites and "adult" sites. You’re almost assured of inadvertently downloading something nasty from such sites and Firefox or Opera will at least give you a fighting chance of avoiding it. And don't feel too complacent if you don't frequent such Web sites as Web servers of legitimate and popular sites have been hacked in the past and they can also be a source of malicious software.

You also need to seriously consider not using services such as Internet banking where you stand to suffer real financial damage. No computer connected to the Internet is entirely secure, but provided you keep all your software updated with the latest security patches and you're sensible in avoiding things like "phishing" attempts (such as fake bank e-mails) the risk is small. As there will be no new security patches for Windows 98 the risk increases, but by how much is impossible to say. Personally I wouldn't use a Windows 98 system for such activities.

This article was sparked by discussion on the Melb PC newsgroups of the pending end of Windows 98 support and the realisation that quite a few members still use it. It was also realised that most such users wouldn't be in the "expert" category and would probably appreciate some guidance. Obviously each user has different requirements, so while the generic solutions I’ve presented here won't cover every situation, they should provide a solid basis for users to come up with a solution that fits their individual needs without having to cover the same basic ground.

Thanks to those members who contributed to the initial discussion and gave the final draft the "once over".

Reprinted from the April 2006 issue of PC Update, the magazine of Melbourne PC User Group, Australia

[ About Melbourne PC User Group ]