Microsoft recently retired Windows XP SP2 on July 13, removing the tired-but-classic OS from its update roster. This meant that consumers still running XP SP2 wouldn't receive the emergency update for the LNK shortcut vulnerability (KB2286198). However Finland-based antivirus vendor F-Secure detailed a way for consumers to trick XP SP2 into (virtually) thinking its SP3, thus allowing Microsoft-sanctioned updates to resume.
The "trick" actually stems from a previous problem with Grand Theft Auto IV. When it was released in December 2008, the game wouldn't run on XP SP2. However gamers tricked the OS by editing this registry key: KLM\System\CurrentControlSet\Control\Windows. Gamers simply edited the DWORD value CSDVersion from 200 to 300. The trick became effective after a reboot.
F-Secure decided to see if the GTA IV trick would also work with KB2286198. It did. "WindowsXP-KB2286198-x86-ENU.exe installed on our SP2 test system once we tweaked the registry," the company said in a blog. "We also tested an LNK exploit, and it did not infect the system after the patch."
The firm also indicated that the forced update was not officially tested or supported by Microsoft for XP SP2. "We do NOT recommend that anybody use this tweak in a production network of any kind," F-Secure said. "Hacking the registry and applying updates is likely a very quick way to destabilize your system. You really should update to Service Pack 3 if at all possible."
As F-Secure warns, experiment at your own risk.
