******************************************************************* SQL Critical Update Wizard for Microsoft® SQL Server 2000™ and SQL Server 2000 Desktop Engine 2000 (MSDE 2000) Readme File February 09, 2003 ******************************************************************* © Microsoft Corporation 2003. All rights reserved. ******************************************************************* Contents 1.0 Liability Disclaimer 2.0 Introduction 3.0 Prerequisites for Running the SQL Critical Update Wizard 4.0 Applicable SQL Server 2000 Versions 5.0 Downloading the SQL Critical Update Wizard 6.0 Running SQL Critical Update Wizard ******************************************************************* 1.0 Liability Disclaimer ******************************************************************* Microsoft is providing the SQL Critical Update Wizard to assist in detecting and repairing computers vulnerable to the Slammer worm. This tool is provided AS-IS, with no warranties of any kind, either express or implied. You should evaluate and test the wizard before using it in your environment. When running the wizard, you are required to accept the End User License Agreement (EULA). ******************************************************************* 2.0 Introduction ******************************************************************* The SQL Critical Update Wizard is a Windows utility for easily locating and patching instances of SQL Server 2000 and SQL Server 2000 Desktop Engine (MSDE 2000) on your computer that are vulnerable to the Slammer worm. ******************************************************************* 3.0 Prerequisites for Running the SQL Critical Update Wizard ******************************************************************* Permissions: Before you run the Critical Update Wizard you must log on as a user with local Administrative privileges. These privileges enable you to install and repair software. If you run the wizard and nothing happens, you probably are not running with local Administrative privileges. System Requirements: * PC with Intel or compatible Pentium 166 MHz or higher processor * Minimum of 64 MB of RAM (128 MB or more recommended) * Microsoft Internet Explorer 5.0 or later * VGA or higher resolution monitor * Microsoft Mouse or compatible pointing device * Windows Installer 1.0. NOTE: Windows XP and Windows 2000 include the Windows installer. For other systems, you can download Windows Installer from http://www.microsoft.com/downloads. Supported Operating Systems: * Microsoft Windows 98 * Microsoft Windows ME * Microsoft Windows NT * Windows 2000 * Windows XP ******************************************************************* 4.0 Applicable SQL Server 2000 Versions ******************************************************************* The SQL Critical Update Kit is designed to work with all editions of SQL Server 2000 and MSDE 2000. For a list of Microsoft SQL Server 2000 and MSDE versions that are vulnerable to the Slammer worm, see http://www.microsoft.com/technet/treeview/default.asp?url=/technet/ security/virus/alerts/slammer.asp. ******************************************************************* 5.0 Downloading the SQL Critical Update Wizard ******************************************************************* To download the SQL Critical Update wizard: 1. Go to http://www.microsoft.com/sql/downloads/securitytools.asp. 2. Click on the SQL Server 2000 Critical Update Wizard link. 3. On the download page, select the language for your SQL Server 2000 or MSDE 2000 installations and then click the Go button. 4. When the download begins, you are given a choice of whether to run (Open) the SQLCritUpdWiz_XXX.msi package file from the Microsoft Web server or save it to the local machine. If you open the file, the wizard will run remotely. If you plan to install SQL Critical Update Wizard on several computers, you should download the file and place it on the network so that it can be easily run throughout your organization. ******************************************************************* 6.0 Running the SQL Critical Update Wizard ******************************************************************* To run the SQL Critical Update Wizard, follow these steps: 1. Double-click SQLCritUpdWiz_XXX.msi. 2. When you are prompted to install the update, click Next. 3. Read and accept the License Agreement, and then click Next. If you do not have MSDE 2000 or SQL Server 2000 installed on your computer, or if you have one of these products but have already updated to a version that is not affected by the Slammer worm, you receive the following message: Critical Update Not Required. 4. If you are prompted to install the update, click Install. 5. When you receive a message that indicates the installation was successful, click Finish. If the update is unsuccessful or further action is required, see http://support.microsoft.com/?kbid=814372.