Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: REDACTED on May 15, 2017, 10:47:43 AM
-
I had to turn off automatic updates on my WIN10 because every single time it would cause a problem, e.g. "your hard drive is corrupted", or it indicates wireless is working and it's not. A myriad of problems. So, I turned it off. So, my computer may not be updated for wannacry. I ran the monthly virus scan from MS today and nothing. I have defender turned on automatic now. And I use Avast. But on Avast they don't have anything posted and nothing on the forum So, I don't know if it protects me or not. Talking to Avast is like breaking into the pentagon.
-
Yes, see: https://forum.avast.com/index.php?topic=202339.0
-
Funny thing, on each and every antivirus forum we ask this question the answer is the same "Yeas, our antivirus will protect you against Wannacry", yet 100000 pc were infected...
-
Funny thing, on each and every antivirus forum we ask this question the answer is the same "Yeas, our antivirus will protect you against Wannacry", yet 100000 pc were infected...
Well none can protect until it's been detected and measures put in place, the worrying part is that the ransomware will now be modified and released again to infect more systems and the circle goes round and round :(
-
Funny thing, on each and every antivirus forum we ask this question the answer is the same "Yeas, our antivirus will protect you against Wannacry", yet 100000 pc were infected...
https://virustotal.com/en/file/09a46b3e1be080745a6d8d88d6b5bd351b1c7586ae0dc94d0c238ee36421cafa/analysis/
https://virustotal.com/en/file/24d004a104d4d54034dbcffc2a4b19a11f39008a575aa614ea04703480b1022c/analysis/
https://virustotal.com/en/file/2584e1521065e45ec3c17767c065429038fc6291c091097ea8b22c8a502c41dd/analysis/
https://virustotal.com/en/file/2ca2d550e603d74dedda03156023135b38da3630cb014e3d00b1263358c5f00d/analysis/
https://virustotal.com/en/file/4a468603fdcb7a2eb5770705898cf9ef37aade532a7964642ecd705a74794b79/analysis/
https://virustotal.com/en/file/b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25/analysis/
https://virustotal.com/en/file/d8a9879a99ac7b12e63e6bcae7f965fbf1b63d892a8649ab1d6b08ce711f7127/analysis/
https://virustotal.com/en/file/ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa/analysis/
https://virustotal.com/en/file/f8812f1deb8001f3b7672b6fc85640ecb123bc2304b563728e6235ccbe782d85/analysis/
The above samples are the one listed in avast blog when it was posted
TrendMicro blog have more samples listed
https://forum.avast.com/index.php?topic=52252.msg1394233#msg1394233
-
John, it seems you don't understand/know things.
If you would have asked the question before that malware was known, all would have said no because we don't know that it exists.
Detection can only be added after the malware has been discovered and all anti-malware developers did add it really fast after the discovery.
Yes there over are 200.000 networks in +/- 150 countries that are infected.
The reason for that is that they did not applied the security fix that was released a month ago and/or that they are using a obsolete Windows version.
-
I had to turn off automatic updates on my WIN10 because every single time it would cause a problem, e.g. "your hard drive is corrupted", or it indicates wireless is working and it's not. A myriad of problems. So, I turned it off. So, my computer may not be updated for wannacry. I ran the monthly virus scan from MS today and nothing. I have defender turned on automatic now. And I use Avast. But on Avast they don't have anything posted and nothing on the forum So, I don't know if it protects me or not. Talking to Avast is like breaking into the pentagon.
You mentioned it may cause a problem e.g. your hard driver is corrupted. Wireless is working and it's not. Your computer ain't affected with wannacry. The way I see it, it has 2 different scenarios.
a) You bought your computer in a retail store where they accidentally installed a corrupted version of windows by contacting a 3rd party technician to upgrade your HDD to SD (at the request of customer when they bought it). Trust me, I had this experience last year from June-July 2016 and December-March 2017. Back then my laptop was Acer, I had to send my laptop to the retail store and they had to sent it to the computer manufacturer and I had an argument with the retail store and the manufacturer via phone of why my laptop was sent frequently. If your computer/laptop is Acer, I am afraid that you might have this problem, because especially Acer does this kind of things.
b) You haven't done any upgrades/updates to your wireless network card and to your computer via your computer manufacturer e.g. DELL, HP, Acer, and etc. DELL Support Assist, HP Support Assistant and etc. Update/upgrade your computer ONLY through your computer manufacturer.
-
In this case "BACKUP" is must.No Antivirus gives you 100% protection.
Use your common sense and patch the OS. ;)
-
John, it seems you don't understand/know things.
Hi,
I do understand "things".
Somehow, I believed that Avast! would rely on a signature-less mechanism to detect such a threat (heuristics, behavior blocker, sandboxing, running the threat in a virtual machine, etc), rather than "adding detection" after....
Any antivirus company can add detection "after", when the threat is known.
-
Any antivirus company can add detection "after", when the threat is known.
Behavior shield did in fact detect it before that. Cheers.
-
Funny thing, on each and every antivirus forum we ask this question the answer is the same "Yeas, our antivirus will protect you against Wannacry", yet 100000 pc were infected...
https://virustotal.com/en/file/09a46b3e1be080745a6d8d88d6b5bd351b1c7586ae0dc94d0c238ee36421cafa/analysis/
https://virustotal.com/en/file/24d004a104d4d54034dbcffc2a4b19a11f39008a575aa614ea04703480b1022c/analysis/
https://virustotal.com/en/file/2584e1521065e45ec3c17767c065429038fc6291c091097ea8b22c8a502c41dd/analysis/
https://virustotal.com/en/file/2ca2d550e603d74dedda03156023135b38da3630cb014e3d00b1263358c5f00d/analysis/
https://virustotal.com/en/file/4a468603fdcb7a2eb5770705898cf9ef37aade532a7964642ecd705a74794b79/analysis/
https://virustotal.com/en/file/b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25/analysis/
https://virustotal.com/en/file/d8a9879a99ac7b12e63e6bcae7f965fbf1b63d892a8649ab1d6b08ce711f7127/analysis/
https://virustotal.com/en/file/ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa/analysis/
https://virustotal.com/en/file/f8812f1deb8001f3b7672b6fc85640ecb123bc2304b563728e6235ccbe782d85/analysis/
The above samples are the one listed in avast blog when it was posted
TrendMicro blog have more samples listed
https://forum.avast.com/index.php?topic=52252.msg1394233#msg1394233
I'm not sure, but I think this is the virustotal limitation. They use only on demmand scanning (even with command line) and not the full potential of the apps.
-
It is not a limitation, virustotal is not a antivirus program and never was intended to be
Read the FAQ on VT website
-
VT doesn't use the full capacity of the av's and that can result to VT showing a av is not detecting something while it does.
If something is detected or not on a users system depends also on the settings the user has set.
John, what you clearly don't understand is that it is not possible to create a detection if the method the malware is using is not known.
If it was, diseases like aids, cholera etc would not be able to infect people.
-
If something is detected or not on a users system depends also on the settings the user has set.
... if the method the malware is using is not known.
What is "unknown " in a software encrypting all your files????
To you, seems a normal behavior???
-
Encrypting files doesn't mean it is caused by malware and sure can be normal behavior.
e.g. when people encrypt their files for protection.
Packaging files with a compression algorithm is basically also encrypting them.
-
To you, encrypting seems a normal behavior?
Sometimes YES.
Who decides wheather encrypting is wanted or not?
-
Who decides wheather encrypting is wanted or not?
Best case scenario, the user. ;)
-
John, what you clearly don't understand is that it is not possible to create a detection if the method the malware is using is not known.
If it was, diseases like aids, cholera etc would not be able to infect people.
It seems it is possible , for others:
https://www.bitdefender.com/media/html/business/wannacry/?icid=footer_ransomware_attack
"Bitdefender Machine Learning models, available in all editions of Bitdefender GravityZone, are designed specifically to catch never before seen attacks at pre-execution stage."
-
So did Avast, see Reply #9.
-
are designed specifically to catch never before seen attacks at pre-execution stage
There is a very good reason why they don't say "catch ALL never before...".
It is simply not possible to do so.
On a note :
Bitdefender added detection for WannaCry AFTER it was discovered and so did all other anti-malware I have checked.
Avast says :
Behavior Shield comes standard in all versions of Avast 2017, protecting you from zero-second threats, ransomware and other malicious programs
All other major av developers/vendors say something similar, but non is saying "ALL".
-
John, what you clearly don't understand is that it is not possible to create a detection if the method the malware is using is not known.
If it was, diseases like aids, cholera etc would not be able to infect people.
It seems it is possible , for others:
https://www.bitdefender.com/media/html/business/wannacry/?icid=footer_ransomware_attack
"Bitdefender Machine Learning models, available in all editions of Bitdefender GravityZone, are designed specifically to catch never before seen attacks at pre-execution stage."
They blocked the exploit attempt, not detecting the actual malicious file, this was added later when they got samples
so several layerers of protection
1. Your AV vendor have added detection for the exploit
2. You have installed the patch from MS and closed the security hole
3. Your AV vendor add detection for the malicious file(s) as they are found
What is more important, Bitdefender Hypervisor Introspection was able to prevent the exploit of the vulnerability long before it was disclosed and patched by Microsoft.
Symantec also (and others)
Symantec customers have been protected from WannaCry prior to its emergence. Symantec Secure Endpoint Protection (SEP) and Norton have blocked any attempt to exploit the vulnerability used by WannaCry since April 24, before WannaCry first appeared.
https://www.symantec.com/outbreak/?id=wannacry
https://www.symantec.com/security_response/writeup.jsp?docid=2017-051310-3522-99
What protection all those infected machines had, i dont think that info is posted anywhere ... or?
-
I think people with Windows XP are the most vulnerable, because they don't have the latest patch from MS update.
Now MS wil patch xp to protect more xp users.
-
I think people with Windows XP are the most vulnerable, because they don't have the latest patch from MS update.
Now MS wil patch xp to protect more xp users.
MS have already release a patch of OSes which are no longer supported, this includes XP, Vista and Win 8.0.
-
Any antivirus company can add detection "after", when the threat is known.
Behavior shield did in fact detect it before that. Cheers.
-> http://weblog.av-comparatives.org/proactive-protection-wannacry-ransomware/
-
Where XP users can see if the MS patch instaled .... since - I think - their browser (IE8) is out-of-date (Path history down)? ? KB number ?
Was a patch already been released before for Posready xp users?
Also , I read that a new large-scale cyber attack was under way : "Adylkuzz"
I did not find it in avast VPS history until now. Any news ?
-
Funny thing, on each and every antivirus forum we ask this question the answer is the same "Yeas, our antivirus will protect you against Wannacry", yet 100000 pc were infected...
John,
Your question is based on an assumption that the PC's were infected inspite of having AV software installed & also that without having seen the 'attack vector' before that AV software could catch it.
All AV software works on the basis of 'Known Attack vectors' which can be coded for or known methods that can be caught via any Heuristic based methods.
All the AV vendors will by now be able to detect and catch 'Wannacry' because samples have been caught and examined.
NO AV software will protect you 100% from all possible attacks.
The point of using AV & Anti-malware is to cover as many as you can (get as close to 100% as you can) but you still need to use common sense (that is not so common !!!).
This means you ensure you have good backups of your data that you verify work on a regular basis. (This is the final fallback if your AV & Anti-malware should fail.)
You do not open e-mails or documents or run software from sources that you cannot have confidence in.
If you know that you are going to open/run unknown docs/software, you do it on a machine that is isolated from the network/internet, so that it cannot 'run amok' via your network connection.
Ideally, if you are knowingly running suspect software or accessing suspect files you would do this in a VM (Virtual machine) that is isolated from everything and running on a controlled 'virtual / internal' network that is NOT connected to anything you cannot 'wipe and rebuild' if need be. [remember that VM's are not 100% safe as there are exploits that can 'break out' of VM's.]
Everyone should learn from the 'Wannacry' events that regular backups and regular testing of those backups is essential.
Do not assume that your backups are working ....... check the backups that you create, are accessible, complete and you can get ALL your files back when you try to restore.
Follow a proper backup schedule with multiple copies of your backups kept and make sure that they are kept in multiple safe locations.
(Remember that Viruses etc are not the only risk, if there is a fire or flood would you lose your backups as well. !!!)
-
Thank you Ruby-Tuesday,
It should also be pointed out that significant number of systems affected were non-Microsoft systems, or otherwise known as cracked or illegal Windows systems. Not talking about obsolete or out-of-support systems here.
So there was never the possibility of getting and applying the Windows security patch which is key to preventing the SMB exploit used by the worm module in WannaCry. Hence the number of infected systems was higher than it otherwise might have been had all systems attacked been legal; the onus then would've been on the operators for not applying the Microsoft patch deployed March 2017... As it was, some legal systems never were patched in March as they should have been.
Thought that should be pointed out.
As always patch patch patch. If you can't get a patch in time, find a workaround.
-
Some years ago an Avast Überevangelist :) Malware Removal Expert advised me to install CryptoPrevent as well.
This I did and I've had it ever since on my computer.
It was good to see: "The best thing about (the new Avast Behavior Shield) is that it has proven to be especially powerful against ransomware. Although ransomware samples evolve and morph rapidly, they still exhibit specific behaviors that can be identified. Behavior Shield is capable of detecting and stopping new ransomware variants that haven’t been seen before – something that’s been inherently difficult using other protection mechanisms."
https://blog.avast.com/behavior-shield-our-newest-behavioral-analysis-technology
Do I still need to use CryptoPrevent as well?
"Over 98% of All WannaCry Victims Were Using Windows 7"
https://www.bleepingcomputer.com/news/security/over-98-percent-of-all-wannacry-victims-were-using-windows-7/
?
chris05 - The recently released Microsoft custom patch for XP SP3 x86 is KB4012598
Can be seen after installation in Control Panel / Add or Remove Programs / Check 'Show updates'.
-
Some years ago an Avast Überevangelist :) Malware Removal Expert advised me to install CryptoPrevent as well.
This I did and I've had it ever since on my computer.
<snip>
That sounds like essexboy, though it gould also be Andrey,pro, but like all security software it has to be up to date to get the full benefit/protection. Whilst I don't use CryptoPrevent, the latest version is 8.0.3.7 I believe dated 05/16/2017.
Depending on how long ago this advice was given, it could precede when the additional protection against ransomeware was included in avast.
-
Bleeping computer is wrong.
15% of the infected systems was/is using Windows 10.
-
Yes, it was EssexBoy DavidR back in 2014 :) .......on another site. Long time no see - where is he?
I got the all clear - no malware.
I have just installed the latest CryptoPrevent version......just wondered what thoughts on this are now that Avast has the Behaviour Shield in 2017.
Really Eddy......I thought Windows 10 was unaffected.
-
He has more commitments now that take up most of his time, he pops in to the forums from time to time.
Not knowing how CryptoPrevent goes about its work and up to a point Behaviour Shield. If they were using the same methods then there is a possibility they could clash. Personally I try to keep my system light and not spend more time servicing my system than it servicing my needs.
I do however have a robust backup and recovery strategy, taking exact image backups of my drives weekly.
-
Essexboy has quit this webboard.
Only Windows versions that where/are not vulnerable are Windows 98 and earlier.
And about your question (Do I still need to use CryptoPrevent as well?)
There is and never will be one tool that protects your system against all "badware".
So yes, you will need to use multiple to have the best protection as possible.
Although those tools can help to protect a system, the largest risk is always the user.
Security starts with what a user knows/does.
I see that over 99,9% of the users are using a account with administration rights for daily use.
If someone is using such a account for daily use the user might as well not install any protection software at all.
To say it simple, malware has the same rights on a system as the user account that is used.
-
Thanks for your comments and help.
I am wondering about a clash too, but found this...
"There is NO Anti-Virus software on the market today that provides the same type of protection that CryptoPrevent provides, it works in an entirely different manner.
Since the two can co-exist on the same PC peacefully, and CryptoPrevent’s protections do not utilize any system resources, why not utilize both methods of protection?"
"I do however have a robust backup and recovery strategy, taking exact image backups of my drives weekly."
How do you do that DavidR?
I'm afraid I'm one of those 99.9% of users Eddy! :o Learnt something today....
-
@Eddy,
"Bleeping computer is wrong.
15% of the infected systems was/is using Windows 10."
Which versions of Windows 10?
Edit: typo
-
OFF TOPIC
Super image / quote you have -midnight! <3
From an astronomy lover
-
Thanks for your comments and help.
<snip>
"I do however have a robust backup and recovery strategy, taking exact image backups of my drives weekly."
How do you do that DavidR?
<snip>
There are many image backup software options available, some free. They make an exact image of the Drive or Partition you want to copy to another hard drive preferably to an external hard drive. The one I use on my primary system (in my signature) is a paid option but very old and no longer sold. I do an image backup every week and keep the last six backup images. If I have a problem that is likely to take more than 30 minutes (longer than restoring a backup), then I use the image backup.
http://www.techradar.com/news/the-best-free-pc-backup-software (http://www.techradar.com/news/the-best-free-pc-backup-software) and for later OSes you can use their own option https://www.howtogeek.com/howto/4241/how-to-create-a-system-image-in-windows-7/ (https://www.howtogeek.com/howto/4241/how-to-create-a-system-image-in-windows-7/).
-
Bleeping computer is wrong.
15% of the infected systems was/is using Windows 10.
If wrong, BleepingComputer is not to blame as the report comes from Kaspersky
Numbers released by Kaspersky Lab on Friday reveal that over 98% of all documented WannaCry infections were running versions of the Windows 7 operating system.
-
Thanks a lot for the useful info / link DavidR.
So I would need to get an external hard drive first....
-
Thanks a lot for the useful info / link DavidR.
So I would need to get an external hard drive first....
You're welcome.
If you have a 2nd internal hard drive most would allow you to use that drive as the destination drive. The flaw in that is if all of your system went down, there is a possibility it could be effected too.
An external hard drive is preferable as you can disconnect it and secure it when it isn't in use. Get a USB3 external drive (if you have USB3 ports on your system) as USB3 has a higher data transfer rate and the USB3 connection provides power to the drive. So only one connection to be made.
-
I see. I don't have a second internal hard drive. I have an old Dell computer (another reason to back up).......would need to look into this, can't go into too much detail here, as this is an Avast Forum / WannaCry topic. Appreciate your help DavidR. :)
-
Get (free) only storage.
-
@Eddy,
Could you please answer my question.........#34?
Never mind. I found the answer.
-
I see. I don't have a second internal hard drive.
So it's time to do something against hard- & software failures. I make backups AND create OS-images from time to time on
- 2. internal harddisk
- external harddisk - not connected to my PC
- my notebook as second available machine if something serious goes wrong.
-
Some years ago an Avast Überevangelist :) Malware Removal Expert advised me to install CryptoPrevent as well.
This I did and I've had it ever since on my computer.
<snip>
That sounds like essexboy, though it gould also be Andrey,pro, but like all security software it has to be up to date to get the full benefit/protection. Whilst I don't use CryptoPrevent, the latest version is 8.0.3.7 I believe dated 05/16/2017.
Depending on how long ago this advice was given, it could precede when the additional protection against ransomeware was included in avast.
Actually, latest version is 8.0.3.9, and, as of a few versions ago, now has Folder Watch, a new capability similar to RansomFree, in that bait files are placed in stratigic folders so as to notify you sooner rather than later that you are under attack.
Version 8.0.3.9 came in yesterday, so they're keeping up with what is going on. Version .7 came in Tuesday just so you know.
[EDIT:] Additionally, Avast is seeing 4.55% of systems are Windows 10 affected by WannaCry.
-
Looks like updates are pretty fast and furious at present as version was 8.0.3.7 dated 05/16/2017, only 4 days ago.
-
Looks like updates are pretty fast and furious at present as version was 8.0.3.7 dated 05/16/2017, only 4 days ago.
Yes, lately has been both definitions and version updates, sometimes only one or the other, but updates are coming in rapidly either way.
-
Looks like updates are pretty fast and furious at present as version was 8.0.3.7 dated 05/16/2017, only 4 days ago.
Yes, lately has been both definitions and version updates, sometimes only one or the other, but updates are coming in rapidly either way.
Yes, at times the download sites can't keep up.
-
I see. I don't have a second internal hard drive.
So it's time to do something against hard- & software failures. I make backups AND create OS-images from time to time on
- 2. internal harddisk
- external harddisk - not connected to my PC
- my notebook as second available machine if something serious goes wrong.
Yes definitely, thank you stibi......I need to learn how to do it first. :)
What do you mean by "Get (free) only storage" please Eddy?
DavidR you use XP.....
I carried out an XP SP3 repair installation last year, had no Windows updates at all. I turned on Windows Automatic Updates after the WannaCry Ransomeware scare just in case......I received 146 XP SP3 + Microsoft .NET Framework 4 Client Profile updates on 14th May 2017! Microsoft didn't state that they would be allowing this? They only stated that they had released a custom patch for XP, which I installed separately - KB4012598.
"WannaCrypt – an earlier version of the malware – used previously leaked tools by the US’s National Security Agency to exploit vulnerabilities in the Windows platform.
Microsoft patched the vulnerability using MS17-010 in March – but only for current platforms."
So were only Windows 10 users who hadn't applied this patch affected by the recent WannaCry Ransomeware outbreak?
-
All Windows versions after 98 are vulnerable if not patched.
Check the (tech)news sites.
-
So regarding Windows 10 - it was only those users who hadn't applied that patch who were affected.
-
They only stated that they had released a custom patch for XP, which I installed separately - KB4012598.
Do you find now this KB in your "add/remove program" ?
As far as I'm concerned, I applied this fix separately but it is not clear and not appear.
-
<snip quotes>
DavidR you use XP.....
I carried out an XP SP3 repair installation last year, had no Windows updates at all. I turned on Windows Automatic Updates after the WannaCry Ransomeware scare just in case......I received 146 XP SP3 + Microsoft .NET Framework 4 Client Profile updates on 14th May 2017! Microsoft didn't state that they would be allowing this? They only stated that they had released a custom patch for XP, which I installed separately - KB4012598.
Now you can get an idea of how valuable/useful drive imaging software can be, drop back to an earlier drive image backup and you may not have had to do a Repair install. And possibly avoided having to download the old OS updates.
"WannaCrypt – an earlier version of the malware – used previously leaked tools by the US’s National Security Agency to exploit vulnerabilities in the Windows platform.
Microsoft patched the vulnerability using MS17-010 in March – but only for current platforms."
<snip>
Microsoft aren't issuing new updates for XP but as you found, I don't think they stop you getting previously issued updates. They did however make an exception because of the seriousness of the issue for OSes that were no longer supported. This included winXP, Vista and win8.0 the remaining supported OSes got the wannacry update in March as you mentioned.
-
They only stated that they had released a custom patch for XP, which I installed separately - KB4012598.
Do you find now this KB in your "add/remove program" ?
As far as I'm concerned, I applied this fix separately but it is not clear and not appear.
I did apply said fix a couple of days ago and it does appear in my add/remove programmes.
cheers
-
DavidR
Yes, I can now get an idea of how valuable/useful drive imaging software can be!
Microsoft turned their XP update servers OFF - I hadn't been able to get any previously issued updates until now - they must have turned them back on after the WannaCry outbreak! The patch for XP SP3 - KB4012598 - didn't actually come through Windows Automatic Updates, I had to search for it afterwards and manually install it.
They only stated that they had released a custom patch for XP, which I installed separately - KB4012598.
Do you find now this KB in your "add/remove program" ?
As far as I'm concerned, I applied this fix separately but it is not clear and not appear.
chris05 Yes, I do......please see attachment.
-
Yes, a backup plan is a must.
Have not had to ever go back to the beginning and re-install all needed security updates for many a year because I do this.
Also useful for when I do something when I should know better and still do it anyway: An UAC dialog box pops up asking for permission to allow this process (an executable) to run out-of-the-blue and purportedly associated with avast, which I did after researching it and checking the validity of the security certificate...
Went back a day to a valid image before this happened and thus removed the action without harm...
Plan is have to daily or hourly incremental imaging and weekly images saved and all works out well most of the time. Just so you know, it took 10 minutes from beginning to end to restore the image and thus the system. :)
-
Thanks for your help mchain.
"Yes, a backup plan is a must."
I agree. All I need now is for someone to show me how it's done.....which is always preferable to reading instructions and having no-one to answer questions when you have limited knowledge and don't understand all the computer jargon.
Unbeknown to me at the time, due to Security Center / Windows Updates corruption, I hardly had any XP updates to start with......took a tec on another forum to make me aware and by then it was too late - post April 2014. 'MicrosoftFixIt' fixed it, but I couldn't get anymore XP updates prior to the repair installation.
-
Aha!
Some do better when shown how, some do better when written, and some do better when told, etc.,.
Here you go: https://www.youtube.com/results?q=how+to+use+an+disc+imaging+program+to+backup+your+system (https://www.youtube.com/results?q=how+to+use+an+disc+imaging+program+to+backup+your+system)
When ready, start your own topic, and we'll go from there as this is sort of off topic as it is....
-
:)
Thank you for your kindness and that's to all who have helped me here too......I have a lot of important non computer matters to deal with at present and I also have a failing CPU fan I need to take care of, but I will look into this when I can.
Will add video to my favourites.
Better to be safe than sorry.....
-
https://forum.avast.com/index.php?topic=93544.msg1394501#msg1394501
-
DavidR
Yes, I can now get an idea of how valuable/useful drive imaging software can be!
Microsoft turned their XP update servers OFF - I hadn't been able to get any previously issued updates until now - they must have turned them back on after the WannaCry outbreak! The patch for XP SP3 - KB4012598 - didn't actually come through Windows Automatic Updates, I had to search for it afterwards and manually install it.
They only stated that they had released a custom patch for XP, which I installed separately - KB4012598.
Do you find now this KB in your "add/remove program" ?
As far as I'm concerned, I applied this fix separately but it is not clear and not appear.
chris05 Yes, I do......please see attachment.
Hi,
I finally found it in my registry, but not under SP3 but under SP4 ;D
Edit:
Where XP users can see if the MS patch instaled .... since - I think - their browser (IE8) is out-of-date (Path history down)?
Also found working WU on XP and IE8 with history and famous KB (15 march 2017)
http://www.update.microsoft.com/windowsupdate/v6/default.aspx?ln=fr
-
DavidR
Yes, I can now get an idea of how valuable/useful drive imaging software can be!
Microsoft turned their XP update servers OFF - I hadn't been able to get any previously issued updates until now - they must have turned them back on after the WannaCry outbreak! The patch for XP SP3 - KB4012598 - didn't actually come through Windows Automatic Updates, I had to search for it afterwards and manually install it.
They only stated that they had released a custom patch for XP, which I installed separately - KB4012598.
Do you find now this KB in your "add/remove program" ?
As far as I'm concerned, I applied this fix separately but it is not clear and not appear.
chris05 Yes, I do......please see attachment.
Hi,
I finally found it in my registry, but not under SP3 but under SP4 ;D
SP4 is not from Microsoft. It's know as an unofficial download and extends the update life cycle.
https://forum.avast.com/index.php?topic=52252.msg1233714#msg1233714
-
SP4 is not from Microsoft. It's know as an unofficial download and extends the update life cycle.
https://forum.avast.com/index.php?topic=52252.msg1233714#msg1233714
I know it well
It is by the link that you give that I installed it ;)
-
chris05 - Microsoft updates should show in Add or Remove Programs - have you checked 'Show updates'?
Good video bob3160. :)
-
Thanks alicia.rose. :)
-
chris05 - have you checked 'Show updates'?
Yes of course ;)
-
chris05 - have you checked 'Show updates'?
Yes of course ;)
Then something is wrong? Microsoft updates are removable through Add or Remove Programs.
-
What about KB4018466 I have in my "add/remove"?
After research , I found:
https://support.microsoft.com/en-us/help/894199/description-of-software-update-services-and-windows-server-update-services-changes-in-content-for-2017
Security Update for Windows Server 2008 and Windows XP Embedded (KB4018466)
Locale: All
Deployment: Important/Automatic Updates, WSUS, and Catalog
Classification: Security Updates
Security severity rating: Critical
Supersedes: MS17-010 (KB4012598) on Windows Server 2008 and Windows XP Embedded
Target platforms: Windows Server 2008 and Windows XP Embedded
Approximate file sizes:
Windows Server 2008 IA-64 update: ~ 1021KB
Windows Server 2008 update: ~ 1053KB
Windows Server 2008 for x64-based Systems update: ~ 1200KB
WES09 and POSReady 2009 update: ~ 666KB
It may be normal that I do not find this update (KB4012598) in my add/remove if it has been replaced
however KB4012598 is still present (installed) in my registry and "Uninstal reg key"
-
Hi chris05 :)
"It may be normal that I do not find this update (KB4012598) in my add/remove if it has been replaced"
Replaced? KB4012598 is the latest update for XP SP3 x86
Dated May12th 2017 >>
https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/
Info:
"Update 5/22/2017: Today, we released an update to the Microsoft Malicious Software Removal Tool (MSRT) to detect and remove WannaCrypt malware. For customers that run Windows Update, the tool will detect and remove WannaCrypt and other prevalent malware infections. Customers can also manually download and run the tool by following the guidance here. The MSRT tool runs on all supported Windows machines where automatic updates are enabled, including those that aren
-
Replaced? KB4012598 is the latest update for XP SP3 x86
Maybe you have not understood that this update (May12th) applies to windows xp NO embedded
For embedded , the patch (KB4012598) was applied March 14th , like said at the beginning of your link
In March, we released a security update which addresses the vulnerability that these attacks are exploiting. Those who have Windows Update enabled are protected against attacks on this vulnerability. For those organizations who have not yet applied the security update, we suggest you immediately deploy Microsoft Security Bulletin MS17-010.
Then , May9th (3 days before the release of the patch for xp no embedded) , as I said (as MS said) KB4018466 Supersedes KB4012598 just fot WS 2008 and WXP Embedded
"Update 5/22/2017: Today, we released an update to the Microsoft Malicious Software Removal Tool (MSRT) to detect and remove WannaCrypt malware.For customers that run Windows Update, the tool will detect and remove WannaCrypt and other prevalent malware infections.
Furthermore , do not confuse the patch to close the flaw (KB4012598 May12th).... and detection + treatment of malware when it passed the flaw (MSRT KB890830 May22th) , more or less antimalware.
-
Headache - don't think I'll try to help again....chris05
I searched under XP embedded - I did notice.
You should be able to remove KB4012598 without accessing the registry!
Not confused - I gave that additional info for others who have operating systems that are supported......I use XP - doesn't apply.
-
After scanning my PC, Avast advised me to download Microsoft's patch KB4012598 as protection from the Wanna Cry virus.
After the patch had been installed, all the browsers on the PC stopped working properly. About half of the websites that I use regularly failed to load; file downloads also failed. Uninstalling the patch and multiple reboots didn't help.
Eventually, I got the browsers working again by doing a system restore.
I understand this problem doesn't affect all versions of Windows. I'm running Vista Business SP2.
Try Googling "Wanna Cry patch KB4012598 causing services to fail"
I don't know if this is the right place to publish this post. I originally wanted to notify Avast about the issue but was unable to find an email address to contact them directly.
-
Read this thread and look at using the stated comand
https://partnersupport.microsoft.com/en-us/par_servplat/forum/par_winserv/wanna-cry-patch-kb4012598-causing-services-for-net/13ca9ed3-2a78-4a7b-a41d-b6963d841504?auth=1
We ran into a similar issue after installing this patch. This resolved it for us:
Launch Command Prompt and run:
sc.exe config lanmanworkstation depend= ""
After running this, reboot the system and the Workstation and NetLogon services should start up.
-
Hi M ( essexboy ) :)
Happy to see you here ( again ).
Greetz, E ( Red ).