Author Topic: Vulnerable To Wannacry/DoublePulsar Attack Warning?  (Read 19104 times)

0 Members and 2 Guests are viewing this topic.

Offline Spiritual2016

  • Sr. Member
  • ****
  • Posts: 348
Vulnerable To Wannacry/DoublePulsar Attack Warning?
« on: July 01, 2017, 07:43:18 PM »
Hello.

My full System Scan was run automatically this morning but no issues were found.

I ran a manual Smart Scan to confirm this but it stated that 'Owner-PC' is not configured properly and there was a network issue that was a 'Vulnerability To Wannacry/DoublePulsar Attack Warning'  but that my router is problem-free.

1. What is this about and why didn't the full system scan detect this? Is this a false positive situation?

2. When I check my 'Notifications,' there is a link beside Smart Scan for 'Details' from a May Smart Scan but when clicked on, it starts a new scan instead of displaying a summary-Why is that?


Offline Alikhan

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2220
Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
« Reply #1 on: July 01, 2017, 07:45:43 PM »
1. A full scan does not run a Wi-Fi inspector scan which scans the router and other devices connected to the network whereas the Smart Scan does. I don't think this is a false positive. Have you ensured all Windows Updates etc have been applied to the affected PC?

2. Known bug.
Windows 10 Home 64-bit • Avast Free (latest stable version) •  Malwarebytes 4 Premium (On-Demand) • Windows Firewall Control • Google Chrome • LastPass • CCleaner • O&O ShutUp10 •

Offline Spiritual2016

  • Sr. Member
  • ****
  • Posts: 348
Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
« Reply #2 on: July 01, 2017, 07:49:56 PM »
Alikhan:

I do not have a Router-I have a cable modem attached to a home connection.

Long ago, my computer tech advised against installing any Windows Updates because they cause more problems than they claim to solve so I turned them off.

I have not noticed any pop-up warning issues, my computer has not become slow or crashed at any point, and I am extremely careful to only visit legitimate websites.

I should have mentioned that Avast and my anti-malware software are up to date, my Windows firewall is on, and Windows 7 x64 Home Premium is being run.
« Last Edit: July 01, 2017, 08:16:03 PM by Spiritual2016 »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
« Reply #3 on: July 01, 2017, 07:56:56 PM »
In the Stats for some of the ransomware variants window 7 is most vulnerable, followed by XP, then windows 10 and windows 8.1.
Quote from: Avast Blog
The top 4 targeted operating systems, according to our data, are (in order): Windows 7 (78%), Windows XP (14%), Windows 10 (6%) and Windows 8.1 (2%).

 Have a read of this avast blog article, https://blog.avast.com/petya-based-ransomware-using-eternalblue-to-infect-computers-around-the-world.
« Last Edit: July 01, 2017, 07:58:35 PM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline mchain

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 5564
  • Spartan Warrior
Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
« Reply #4 on: July 01, 2017, 08:01:48 PM »
Please read the two links included below:
https://pc.net/helpcenter/answers/difference_between_router_and_modem
https://www.howtogeek.com/234233/whats-the-difference-between-a-modem-and-a-router/

Once done, it should be apparent your router is inside your modem.

You've gotten bad advice from your computer tech. 

This alert you've gotten from avast is an example of that and a hacker would able to easily find the vulnerability avast is alerting you to, and exploit it.

If you'd like help in fixing this and other issues, please ask.
Windows 10 Home 64-bit 22H2 Avast Premier Security version 24.1.6099 (build 24.1.88821.762)  UI version 1.0.797
 UI version 1.0.788.  Windows 11 Home 23H2 - Windows 11 Pro 23H2 Avast Premier Security version 24.2.6105 (build 24.1.8918.827) UI version 1.0.801

Offline Alikhan

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2220
Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
« Reply #5 on: July 01, 2017, 08:03:53 PM »
Alikhan:

I do not have a Router-I have a a cable modem attached to a home connection.

Long ago, my computer tech advised against installing any Windows Updates because they cause more problems than they claim to solve so I turned them off.

I have not noticed any pop-up warning issues, my computer has not become slow or crashed at any point, and I am extremely careful to only visit legitimate websites.

I should have mentioned that Avast and my anti-malware software are up to date, my Windows firewall is on, and Windows 7 x64 Home Premium is being run.

The Wi-Fi inspector can also scan modems. I think this is not a false positive but rather the PC hasn't been patched with SMB update via Windows Update.

If you don't use Windows Update, you are missing out on all the cumulative updates as well as more importantly, the security updates.
Windows 10 Home 64-bit • Avast Free (latest stable version) •  Malwarebytes 4 Premium (On-Demand) • Windows Firewall Control • Google Chrome • LastPass • CCleaner • O&O ShutUp10 •

Offline Spiritual2016

  • Sr. Member
  • ****
  • Posts: 348
Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
« Reply #6 on: July 01, 2017, 08:17:42 PM »
-
« Last Edit: July 01, 2017, 08:49:42 PM by Spiritual2016 »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
« Reply #7 on: July 01, 2017, 08:25:52 PM »
How to properly update Windows to protect your computer from WannaCry
https://blog.kaspersky.com/wannacry-windows-update/16593/

WannaCry & The Reality Of Patching
http://blog.trendmicro.com/wannacry-reality-of-patching/


Offline Spiritual2016

  • Sr. Member
  • ****
  • Posts: 348
Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
« Reply #8 on: July 01, 2017, 08:37:34 PM »
-
« Last Edit: July 01, 2017, 08:53:05 PM by Spiritual2016 »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
« Reply #9 on: July 01, 2017, 08:48:46 PM »
Quote
3. Pondus provided a link to the Windows 7 x64 patch so why would Windows Update need to be turned on?   
Do you have avast update on, why?

https://www.howtogeek.com/202038/why-you-need-to-install-windows-updates-automatically/

« Last Edit: July 01, 2017, 08:50:21 PM by Pondus »

Offline Spiritual2016

  • Sr. Member
  • ****
  • Posts: 348
Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
« Reply #10 on: July 01, 2017, 08:53:14 PM »
1. I checked and the 'Ransomware Shield' was automatically installed during an Avast update so why is there still an issue?

2. Am I opening or saving the Windows 7 x64 patch file that Pondus suggested?

3. After rebooting, should I run a Full Scan, Smart Scan, or both to ensure that WannaCry crawled into the computer before the vulnerability was patched?
« Last Edit: July 01, 2017, 08:58:07 PM by Spiritual2016 »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
« Reply #11 on: July 01, 2017, 08:58:05 PM »
Quote
   2. Am I opening or saving the Windows 7 x64 patch file that Pondus suggested?
Turn ON windows update and your OS will handle this automatically .... click the link and read the info in my post above


Offline Spiritual2016

  • Sr. Member
  • ****
  • Posts: 348
Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
« Reply #12 on: July 01, 2017, 09:02:16 PM »
1. I 'still' do not understand why the automatically installed 'Ransomware Shield' did not fix this vulnerability.

2. Why can't I open/save the Windows 7 x64 patch file 'instead' of turning Windows Update on?

3. After rebooting, should a Full Scan, Smart Scan, or both be run to ensure that WannaCry did not crawl into the computer before the vulnerability was patched?

Can someone 'besides' Pondus please assist me?
« Last Edit: July 01, 2017, 09:05:48 PM by Spiritual2016 »

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
« Reply #13 on: July 01, 2017, 09:06:33 PM »
Someone else helping you will still get you the same advice.
Just because you don't like what Pondus had to say doesn't mean it wasn't concrete advice.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline Spiritual2016

  • Sr. Member
  • ****
  • Posts: 348
Re: Vulnerable To Wannacry/DoublePulsar Attack Warning?
« Reply #14 on: July 01, 2017, 09:07:58 PM »
Let's try this again:

1. I 'still' do not understand WHY the automatically installed 'Ransomware Shield' did not fix this vulnerability.

2. I READ Pondus' article and it states to install the APPROPRIATE MS17-010 update but then he stated to turn Windows Update ON instead-Which option am I choosing?

I ask because I was told that turning on Windows Updates creates more problems than it solves so WHY can't I open/save the Windows 7 x64 patch file 'instead' of turning Windows Update on?

« Last Edit: July 01, 2017, 09:11:59 PM by Spiritual2016 »