illegitimate xp pro

Hi,got a sad tale from friend in the uk.Having shopped around she decided to buy her new computer from this nice bloke.He asked her what she wanted and how much she wished to spend etc etc(I would like a new computer please for 500 pound).She agreed on windows xp. He delivered it and set it up handed her a few disks and dissappeared( the disks he left are all office 2000) .He would post her the neccessary paperwork and warranty forms so he said "alarm bells rang for me ".But he was such a nice bloke she said, YEAH SURE.All things ran well,then she discovered it was xp pro not xp home.Not a big issue but still no paperwork arrives.She rings him several times,no answer.Goes to his place of business,empty(done a runner maybe) .The computer works quite fine so she accepts her naievity.Its not till I persuade her to get the latest updates from microsoft that she was told she couldent because her software was not registered to that machine or something similar.She is now quite afraid of being hunted by the software police.Told her It will likely still be ok,even without sp1 update.Am I correct in that assumption or is she in trouble.
I read somewhere this week about a huge security hole in xp to do with dodgy url's hiding malicious code,having been kept very quite by microsoft.Hence the importance of SP1 (TRUE or FALSE)
Dont want to alarm her even more at this stage,but if it be so it may pay her to head back to 98 se.Any info or thoughts would be greatfully appreciated.

 

Most of the the security fixes and updates prior to SP1 are available via the Microsoft corporate download site, and will install on your version...

http://corporate.windowsupdate.microsoft.com/en/default.asp

Only problem is many of these updates from the corporate site won't be any use for your particular installation as the advantage of Windows Update is it's ability to scan your hardware/software configuration only for updates for your particular PC. So choose only the updates you think you need. But if you install an update that your config. doesn't need you shouldn't have any problems though.
SP1 includes updates such as USB2.0 support and all new (post SP1) updates plus other minor updates and enhancements. But most are available from the corporate site.
The alternative is to buy a legit copy of XP. (not a bad idea!) If you buy XP pro you can change the key number on your existing system with the new key number from the purchased disc without reformatting.

http://www.labmice.net/WindowsXP/articles/changeID.htm

There's also also a MS Knowledge base article explaining how to change the Key to a legit one but can't locate it at the moment at MS help. Maybe it was such a popular Knowledge base Q that they removed it!

 

thanks

thanks to all for the info,may help to ease her mind after I investigate the links further.Regards Moa.

 

The web page for the link provided by "Paul" reads

"The Windows Update Corporate Web site has been retired "

This is just for information.

 

Thanks for the link Arie. That makes my life easier updating my clients.