Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Spiritual2016 on July 01, 2017, 07:43:18 PM

Title: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Spiritual2016 on July 01, 2017, 07:43:18 PM
Hello.

My full System Scan was run automatically this morning but no issues were found.

I ran a manual Smart Scan to confirm this but it stated that 'Owner-PC' is not configured properly and there was a network issue that was a 'Vulnerability To Wannacry/DoublePulsar Attack Warning'  but that my router is problem-free.

1. What is this about and why didn't the full system scan detect this? Is this a false positive situation?

2. When I check my 'Notifications,' there is a link beside Smart Scan for 'Details' from a May Smart Scan but when clicked on, it starts a new scan instead of displaying a summary-Why is that?

Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Alikhan on July 01, 2017, 07:45:43 PM
1. A full scan does not run a Wi-Fi inspector scan which scans the router and other devices connected to the network whereas the Smart Scan does. I don't think this is a false positive. Have you ensured all Windows Updates etc have been applied to the affected PC?

2. Known bug.
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Spiritual2016 on July 01, 2017, 07:49:56 PM
Alikhan:

I do not have a Router-I have a cable modem attached to a home connection.

Long ago, my computer tech advised against installing any Windows Updates because they cause more problems than they claim to solve so I turned them off.

I have not noticed any pop-up warning issues, my computer has not become slow or crashed at any point, and I am extremely careful to only visit legitimate websites.

I should have mentioned that Avast and my anti-malware software are up to date, my Windows firewall is on, and Windows 7 x64 Home Premium is being run.
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: DavidR on July 01, 2017, 07:56:56 PM
In the Stats for some of the ransomware variants window 7 is most vulnerable, followed by XP, then windows 10 and windows 8.1.
Quote from: Avast Blog
The top 4 targeted operating systems, according to our data, are (in order): Windows 7 (78%), Windows XP (14%), Windows 10 (6%) and Windows 8.1 (2%).

 Have a read of this avast blog article, https://blog.avast.com/petya-based-ransomware-using-eternalblue-to-infect-computers-around-the-world (https://blog.avast.com/petya-based-ransomware-using-eternalblue-to-infect-computers-around-the-world).
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: mchain on July 01, 2017, 08:01:48 PM
Please read the two links included below:
https://pc.net/helpcenter/answers/difference_between_router_and_modem (https://pc.net/helpcenter/answers/difference_between_router_and_modem)
https://www.howtogeek.com/234233/whats-the-difference-between-a-modem-and-a-router/ (https://www.howtogeek.com/234233/whats-the-difference-between-a-modem-and-a-router/)

Once done, it should be apparent your router is inside your modem.

You've gotten bad advice from your computer tech. 

This alert you've gotten from avast is an example of that and a hacker would able to easily find the vulnerability avast is alerting you to, and exploit it.

If you'd like help in fixing this and other issues, please ask.
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Alikhan on July 01, 2017, 08:03:53 PM
Alikhan:

I do not have a Router-I have a a cable modem attached to a home connection.

Long ago, my computer tech advised against installing any Windows Updates because they cause more problems than they claim to solve so I turned them off.

I have not noticed any pop-up warning issues, my computer has not become slow or crashed at any point, and I am extremely careful to only visit legitimate websites.

I should have mentioned that Avast and my anti-malware software are up to date, my Windows firewall is on, and Windows 7 x64 Home Premium is being run.

The Wi-Fi inspector can also scan modems. I think this is not a false positive but rather the PC hasn't been patched with SMB update via Windows Update.

If you don't use Windows Update, you are missing out on all the cumulative updates as well as more importantly, the security updates.
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Spiritual2016 on July 01, 2017, 08:17:42 PM
-
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Pondus on July 01, 2017, 08:25:52 PM
How to properly update Windows to protect your computer from WannaCry
https://blog.kaspersky.com/wannacry-windows-update/16593/

WannaCry & The Reality Of Patching
http://blog.trendmicro.com/wannacry-reality-of-patching/

Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Spiritual2016 on July 01, 2017, 08:37:34 PM
-
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Pondus on July 01, 2017, 08:48:46 PM
Quote
3. Pondus provided a link to the Windows 7 x64 patch so why would Windows Update need to be turned on?   
Do you have avast update on, why?

https://www.howtogeek.com/202038/why-you-need-to-install-windows-updates-automatically/

Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Spiritual2016 on July 01, 2017, 08:53:14 PM
1. I checked and the 'Ransomware Shield' was automatically installed during an Avast update so why is there still an issue?

2. Am I opening or saving the Windows 7 x64 patch file that Pondus suggested?

3. After rebooting, should I run a Full Scan, Smart Scan, or both to ensure that WannaCry crawled into the computer before the vulnerability was patched?
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Pondus on July 01, 2017, 08:58:05 PM
Quote
   2. Am I opening or saving the Windows 7 x64 patch file that Pondus suggested?
Turn ON windows update and your OS will handle this automatically .... click the link and read the info in my post above

Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Spiritual2016 on July 01, 2017, 09:02:16 PM
1. I 'still' do not understand why the automatically installed 'Ransomware Shield' did not fix this vulnerability.

2. Why can't I open/save the Windows 7 x64 patch file 'instead' of turning Windows Update on?

3. After rebooting, should a Full Scan, Smart Scan, or both be run to ensure that WannaCry did not crawl into the computer before the vulnerability was patched?

Can someone 'besides' Pondus please assist me?
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: bob3160 on July 01, 2017, 09:06:33 PM
Someone else helping you will still get you the same advice.
Just because you don't like what Pondus had to say doesn't mean it wasn't concrete advice.
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Spiritual2016 on July 01, 2017, 09:07:58 PM
Let's try this again:

1. I 'still' do not understand WHY the automatically installed 'Ransomware Shield' did not fix this vulnerability.

2. I READ Pondus' article and it states to install the APPROPRIATE MS17-010 update but then he stated to turn Windows Update ON instead-Which option am I choosing?

I ask because I was told that turning on Windows Updates creates more problems than it solves so WHY can't I open/save the Windows 7 x64 patch file 'instead' of turning Windows Update on?

Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: bob3160 on July 01, 2017, 09:12:02 PM
Let's try this again:

1. I 'still' do not understand WHY the automatically installed 'Ransomware Shield' did not fix this vulnerability.

2. I was told that turning Windows Update on creates more problems than it solves so WHY can't I open/save the Windows 7 x64 patch file 'instead' of turning Windows Update on?
1. it's meant to protect not fix.
2.you received bad advice.  Sure you can manually download and install the patch.
Your computer, your choice. :)
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Spiritual2016 on July 01, 2017, 09:14:39 PM
Bob:

1. Since the 'Ransomware Shield' protects not fixes, WHY did I receive the vulnerability warning?

2. Do I still need to install the MS17-010 update patch OR is turning Windows Update on and installing all cumulative updates and security updates available the better option since the MS17-010 update patch is included in the batch?
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Pondus on July 01, 2017, 09:15:40 PM
Quote
     I was told that turning on Windows Updates creates more problems than it solves so WHY can't I open/save the Windows 7 x64 patch file 'instead' of turning Windows Update on?
You can .... However,  turning off update will not give you any new (or missed) security patches
It is explained in the link above if you bother to read

Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Spiritual2016 on July 01, 2017, 09:18:00 PM
-
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: bob3160 on July 01, 2017, 09:19:30 PM
Pondus:

Provide the link again then please.
Just scroll up it's still there: https://forum.avast.com/index.php?topic=204889.msg1405478#msg1405478
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Spiritual2016 on July 01, 2017, 09:22:16 PM
Pondus:

You included two links and confused me so please paste it again.

If I am just installing the MS17-010 update patch, the article states to RUN it-Is RUNNING it the same as OPENING it or SAVING it?
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Pondus on July 01, 2017, 09:27:27 PM
If you don't know how to, then you should absolutely turn on win update

 ::)

Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Spiritual2016 on July 01, 2017, 09:28:47 PM
I am asking if I am opening or saving the patch file-Can someone please tell me?
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Eddy on July 01, 2017, 09:28:57 PM
You need to install ALL patches/fixes from Microsoft, not just that one.
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Spiritual2016 on July 01, 2017, 09:30:31 PM
Eddy:

Why did my computer tech tell me to turn Windows Update off then?

Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Eddy on July 01, 2017, 09:31:58 PM
Because he is not a tech without relevant knowledge and gave you false information.
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Spiritual2016 on July 01, 2017, 09:32:44 PM
He stated that sometimes there are bugs within updates, requiring Windows to be re-installed, so it is better to just avoid the hassle of potential issues and just turn Windows Update off.

By turning Windows Update on and installing all cumulative and security updates, will the MS17-010 update patch will be automatically installed as well?
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Eddy on July 01, 2017, 09:37:59 PM
If a car manufacturer tells you to return the car because there are problems with the breaks, you are not returning it because the mechanic can make a mistake while installing the new breaks and you rather drive on with the problematic ones ?
Go and install all updates for your system and let us know when you have done so.
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Spiritual2016 on July 01, 2017, 09:39:56 PM
I will post an update shortly.
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: bob3160 on July 01, 2017, 09:42:48 PM
I will post an update shortly.
If it's shortly, I doubt that you would have installed all the updates. :)
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Asyn on July 01, 2017, 09:43:11 PM
Why did my computer tech tell me to turn Windows Update off then?
Sorry to say, but best you kick him and hire someone else.
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: Dix Huit on July 01, 2017, 10:11:17 PM
He stated that sometimes there are bugs within updates, requiring Windows to be re-installed, so it is better to just avoid the hassle of potential issues and just turn Windows Update off.

By turning Windows Update on and installing all cumulative and security updates, will the MS17-010 update patch will be automatically installed as well?

It is true that there are sometimes bugs, but getting infected with something nasty will likely cause much more hassle than re-installing Windows.  Most versions of Windows will allow you to back up the entire hard drive ("system image"), and you could restore from one of these backups if an update to Windows, or a virus, or even ransomware is causing you grief.

The MS17-010 update should be installed with the rest.  You can check on it by looking for "KB4012598" in the list of installed updates.
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: I_See_Bad_People on June 14, 2019, 04:06:08 AM
I reformatted my laptop, installed Avast, and only hours later, ran Avast Wi-Fi Inspector and got this warning of vulnerability to WANNACRY..   The recommended patch didn't work, then my computer started taking forever to do anything.. almost frozen.. The fan was going HARD and staying that way.. I noticed in Task Manager, that Avast Browser was running a bunch of processes.. So I uninstalled it, and installed every single Windows Update that I could.. Kept telling it to check for updates until there were no more.. Now the Wi-Fi Inspector Scan says that everything is secure and good! ...I believe the Windows Updates were what fixed it.!!
Title: Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
Post by: mchain on June 14, 2019, 06:49:43 AM
I reformatted my laptop, installed Avast, and only hours later, ran Avast Wi-Fi Inspector and got this warning of vulnerability to WANNACRY..   The recommended patch didn't work, then my computer started taking forever to do anything.. almost frozen.. The fan was going HARD and staying that way.. I noticed in Task Manager, that Avast Browser was running a bunch of processes.. So I uninstalled it, and installed every single Windows Update that I could.. Kept telling it to check for updates until there were no more.. Now the Wi-Fi Inspector Scan says that everything is secure and good! ...I believe the Windows Updates were what fixed it.!!
Which is what the OP was told to do many times in this thread....  All Avast did was warn of an issue that could/would lead to an infected system as it did for you.  AFAIK the OP never did follow advice.  (Please note last post was made on July 1, 2017, two years ago).