Maybe under SP2 (haven’t managed to test this; probably SP2 already has the required DRM stuff concerned built-in), but in my test with stock-XP the automatic update confirmation box was exactly the same design as the ActiveX download box.

> Microsoft should release a WMP patch that disables all ActiveX functionality in the instance of Internet Explorer that is hosted by the License Acquisition dialog box.

I agree. It would have to cover any pop-ups opened from the hosted box too (not sure if this would happen by default).

As for “stock XP” versus SP2, anyone who has not installed SP2 is simply asking for trouble. The improvements are so profound and far-reaching that the only excuse for not installing this update is if you are in a coporate environment that is adequately protected by other measures and has compatibility issues with mission-critical applications.

With SP2 installed, any pop-ups opened by the License Acquisition dialog box would be subject ot all the security protections I listed earlier, including blocking of ActiveX controls.

As far as I am concerned, no one running Windows XP should even think about using a P2P file-sharing service without SP2 installed. (Of course, I don’t think any sane person should use Kazaa or Grokster at all, but that’s a topic for another day.)

There are actually three different styles of ActiveX downloader. The first came with XP RTM, the second (cleaner, easier to read) with SP1, and the third with SP2.

I honestly don’t see the point of testing any of these infected files on a version of Windows XP with no service packs installed. In that configuration you can be infected by all sorts of viruses and worms, in the preview pane of a message window or even over an open Internet connection a la blaster. Anyone who’s running without SP1 or SP2 will be infected with something before too long.

Laura