Author Topic: Does Avast protect me from Wannacry?  (Read 35007 times)

0 Members and 1 Guest are viewing this topic.

Offline chris..

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2918
Re: Does Avast protect me from Wannacry?
« Reply #60 on: May 22, 2017, 09:50:52 PM »
DavidR

Yes, I can now get an idea of how valuable/useful drive imaging software can be!

Microsoft turned their XP update servers OFF - I hadn't been able to get any previously issued updates until now - they must have turned them back on after the WannaCry outbreak! The patch for XP SP3 - KB4012598 - didn't actually come through Windows Automatic Updates, I had to search for it afterwards and manually install it.

They only stated that they had released a custom patch for XP, which I installed separately - KB4012598.
Do you find now this KB in your "add/remove program" ?
As far as I'm concerned, I applied this fix separately but it is not clear and not appear.

chris05 Yes, I do......please see attachment.
Hi,
I finally found it in my registry, but not under SP3 but under SP4  ;D

Edit:
Where XP users can see if the MS patch instaled .... since - I think - their browser (IE8) is out-of-date (Path history down)? 
Also found working WU on XP and IE8 with history and famous KB (15 march 2017)
http://www.update.microsoft.com/windowsupdate/v6/default.aspx?ln=fr
« Last Edit: May 22, 2017, 10:12:19 PM by chris05 »

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48524
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Does Avast protect me from Wannacry?
« Reply #61 on: May 22, 2017, 09:59:01 PM »
DavidR

Yes, I can now get an idea of how valuable/useful drive imaging software can be!

Microsoft turned their XP update servers OFF - I hadn't been able to get any previously issued updates until now - they must have turned them back on after the WannaCry outbreak! The patch for XP SP3 - KB4012598 - didn't actually come through Windows Automatic Updates, I had to search for it afterwards and manually install it.

They only stated that they had released a custom patch for XP, which I installed separately - KB4012598.
Do you find now this KB in your "add/remove program" ?
As far as I'm concerned, I applied this fix separately but it is not clear and not appear.

chris05 Yes, I do......please see attachment.
Hi,
I finally found it in my registry, but not under SP3 but under SP4  ;D
SP4 is not from Microsoft. It's know as an unofficial download and extends the update life cycle.
https://forum.avast.com/index.php?topic=52252.msg1233714#msg1233714
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline chris..

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2918
Re: Does Avast protect me from Wannacry?
« Reply #62 on: May 22, 2017, 10:07:10 PM »
SP4 is not from Microsoft. It's know as an unofficial download and extends the update life cycle.
https://forum.avast.com/index.php?topic=52252.msg1233714#msg1233714
I know it well
It is by the link that you give that I installed it  ;)

Offline alicia.rose

  • Full Member
  • ***
  • Posts: 144
Re: Does Avast protect me from Wannacry?
« Reply #63 on: May 23, 2017, 12:21:06 AM »
chris05 - Microsoft updates should show in Add or Remove Programs - have you checked 'Show updates'?

Good video bob3160. :)
« Last Edit: May 23, 2017, 12:26:17 AM by alicia.rose »

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48524
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Does Avast protect me from Wannacry?
« Reply #64 on: May 23, 2017, 12:35:26 AM »
Thanks alicia.rose. :)
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline chris..

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2918
Re: Does Avast protect me from Wannacry?
« Reply #65 on: May 23, 2017, 12:49:57 PM »
chris05 - have you checked 'Show updates'?
Yes of course  ;)

Offline alicia.rose

  • Full Member
  • ***
  • Posts: 144
Re: Does Avast protect me from Wannacry?
« Reply #66 on: May 23, 2017, 03:39:41 PM »
chris05 - have you checked 'Show updates'?
Yes of course  ;)

Then something is wrong? Microsoft updates are removable through Add or Remove Programs.
« Last Edit: May 23, 2017, 04:20:36 PM by alicia.rose »

Offline chris..

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2918
Re: Does Avast protect me from Wannacry?
« Reply #67 on: May 23, 2017, 08:49:52 PM »
What about KB4018466 I have in my "add/remove"?

After research , I found:
https://support.microsoft.com/en-us/help/894199/description-of-software-update-services-and-windows-server-update-services-changes-in-content-for-2017
Quote
Security Update for Windows Server 2008 and Windows XP Embedded (KB4018466)

Locale: All
Deployment: Important/Automatic Updates, WSUS, and Catalog
Classification: Security Updates
Security severity rating: Critical
Supersedes: MS17-010 (KB4012598) on Windows Server 2008 and Windows XP Embedded
Target platforms: Windows Server 2008 and Windows XP Embedded
Approximate file sizes:

    Windows Server 2008 IA-64 update: ~ 1021KB
    Windows Server 2008 update: ~ 1053KB
    Windows Server 2008 for x64-based Systems update: ~ 1200KB
    WES09 and POSReady 2009 update: ~ 666KB
It may be normal that I do not find this update (KB4012598) in my add/remove if it has been replaced

however KB4012598 is still present (installed) in my registry and "Uninstal reg key"
« Last Edit: May 23, 2017, 08:51:25 PM by chris05 »

Offline alicia.rose

  • Full Member
  • ***
  • Posts: 144
Re: Does Avast protect me from Wannacry?
« Reply #68 on: May 23, 2017, 10:22:01 PM »
Hi chris05 :)

"It may be normal that I do not find this update (KB4012598) in my add/remove if it has been replaced"

Replaced? KB4012598 is the latest update for XP SP3 x86

Dated May12th 2017 >>

https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/

Info:

"Update 5/22/2017: Today, we released an update to the Microsoft Malicious Software Removal Tool (MSRT) to detect and remove WannaCrypt malware. For customers that run Windows Update, the tool will detect and remove WannaCrypt and other prevalent malware infections. Customers can also manually download and run the tool by following the guidance here. The MSRT tool runs on all supported Windows machines where automatic updates are enabled, including those that aren
« Last Edit: May 23, 2017, 10:37:29 PM by alicia.rose »

Offline chris..

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2918
Re: Does Avast protect me from Wannacry?
« Reply #69 on: May 24, 2017, 12:49:58 AM »


Replaced? KB4012598 is the latest update for XP SP3 x86


Maybe you have not understood that this update (May12th) applies to windows xp NO embedded

For embedded , the patch (KB4012598) was applied March 14th , like said at the beginning of your link
Quote
In March, we released a security update which addresses the vulnerability that these attacks are exploiting. Those who have Windows Update enabled are protected against attacks on this vulnerability. For those organizations who have not yet applied the security update, we suggest you immediately deploy Microsoft Security Bulletin MS17-010.
Then , May9th (3 days before the release of the patch for xp no embedded) , as I said (as MS said) KB4018466 Supersedes KB4012598 just fot WS 2008 and WXP Embedded


"Update 5/22/2017: Today, we released an update to the Microsoft Malicious Software Removal Tool (MSRT) to detect and remove WannaCrypt malware.For customers that run Windows Update, the tool will detect and remove WannaCrypt and other prevalent malware infections.

Furthermore , do not confuse the patch to close the flaw (KB4012598 May12th).... and detection + treatment of malware when it passed the flaw  (MSRT KB890830 May22th) , more or less antimalware.

Offline alicia.rose

  • Full Member
  • ***
  • Posts: 144
Re: Does Avast protect me from Wannacry?
« Reply #70 on: May 24, 2017, 01:24:11 AM »
Headache - don't think I'll try to help again....chris05

I searched under XP embedded - I did notice.

You should be able to remove KB4012598 without accessing the registry!

Not confused - I gave that additional info for others who have operating systems that are supported......I use XP - doesn't apply.
« Last Edit: May 24, 2017, 01:26:27 AM by alicia.rose »

REDACTED

  • Guest
Re: Does Avast protect me from Wannacry?
« Reply #71 on: July 07, 2017, 10:08:42 PM »
After scanning my PC, Avast advised me to download Microsoft's patch KB4012598 as protection from the Wanna Cry virus.
After the patch had been installed, all the browsers on the PC stopped working properly. About half of the websites that I use regularly failed to load; file downloads also failed. Uninstalling the patch and multiple reboots didn't help.
Eventually, I got the browsers working again by doing a system restore.
I understand this problem doesn't affect all versions of Windows. I'm running Vista Business SP2.
Try Googling "Wanna Cry patch KB4012598 causing services  to fail"
I don't know if this is the right place to publish this post. I originally wanted to notify Avast about the issue but was unable to find an email address to contact them directly.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Does Avast protect me from Wannacry?
« Reply #72 on: July 09, 2017, 12:44:04 PM »
Read this thread and look at using the stated comand

https://partnersupport.microsoft.com/en-us/par_servplat/forum/par_winserv/wanna-cry-patch-kb4012598-causing-services-for-net/13ca9ed3-2a78-4a7b-a41d-b6963d841504?auth=1

Quote
We ran into a similar issue after installing this patch.  This resolved it for us:

Launch Command Prompt and run:

sc.exe config lanmanworkstation depend= ""

After running this, reboot the system and the Workstation and NetLogon services should start up. 


Offline Rednose

  • Pirate Party Member
  • Avast Überevangelist
  • Massive Poster
  • *****
  • Posts: 3739
  • Bits of Freedom : https://www.bof.nl
    • Nederlandstalig Avast! forum
Re: Does Avast protect me from Wannacry?
« Reply #73 on: July 09, 2017, 08:51:10 PM »
Hi M  ( essexboy ) :)

Happy to see you here ( again ).

Greetz, E ( Red ).
« Last Edit: July 09, 2017, 08:54:20 PM by Rednose »
OS: Win 10 / iOS 17 / Debian 12 / Tails 5
Real Time: Avast Premium Security
On Demand: Malwarebytes
VPN: NordVPN ( NordLynx ) with Threat Protection ( Lite )