{"id":7637,"date":"2017-05-14T12:30:07","date_gmt":"2017-05-14T20:30:07","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/05\/14\/news-1422\/"},"modified":"2017-05-14T12:30:07","modified_gmt":"2017-05-14T20:30:07","slug":"news-1422","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2017\/05\/14\/news-1422\/","title":{"rendered":"Patching Windows XP against WannaCry ransomware"},"content":{"rendered":"

Credit to Author: Michael Horowitz| Date: Sun, 14 May 2017 12:56:00 -0700<\/strong><\/p>\n

Microsoft just released a patch for Windows XP that fixes a file sharing flaw being exploited by the WannaCry ransomware<\/a>. Here’s how to install it.\u00a0<\/p>\n

You can download some<\/em> versions of the patch using links at the bottom of this May 12th \u00a0Microsoft article: Customer Guidance for WannaCrypt attacks<\/a>. The full list of patch variants, including languages other than English, is in the Windows Catalog, just search for KB4012598<\/a>. Windows Update does not work on XP.<\/p>\n

For an x86 machine with Service Pack 3 installed, the downloaded file name is\u00a0<\/p>\n

windowsxp-kb4012598-x86-custom-enu_eceb7d5023bbb23c0dc633e46b9c2f14fa6ee9dd.exe<\/code><\/p>\n

I know, its looks like malware itself. The file is small, only 665K. Logon as an Administrator and, for good luck, make a Restore Point<\/strong> first thing.<\/p>\n

To see if System Restore is enabled, right click on My Computer, get the Properties and go to the System Restore tab. To actually make the Restore Point, go to Start -> Programs -> Accessories -> System Tools -> System Restore.<\/p>\n

The installation process is simple.<\/p>\n

1. Wizard warns you to backup your system and close all open programs
2. Then you have to agree to a license
3. Installing the patch takes only a few seconds, even on old hardware. It first asks you to wait while it “inspects your current configuration, archives your current files and updates your files.” Then it makes a restore point.\u00a0
4. When its all done, it wants you to reboot<\/p>\n

After rebooting, you can verify that the patch was correctly installed using Add or Remove Programs in the Control Panel. You first need to turn on the checkbox to “Show updates.” Then scroll down looking for the “Windows XP – Software updates” section. It should be huge.<\/p>\n

In this section, look for “Security Update for Windows XP (KB4012598)” with the current date as the date installed. Considering this is Windows XP, the installation date should stick out like a sore thumb. On two machines that I tested, it was, fortunately, the last entry in the list.<\/p>\n

The fix applies to the file sharing component of Windows (Server Message Block or SMB) and thus prevents an XP machine from being infected over a LAN<\/strong> (Local Area Network). However, it would not protect<\/strong> an XP machine that was attacked another way, via email, for example.<\/p>\n

I checked around (here<\/a> and here<\/a>) and Microsoft has not issued an update to their free anti-malware software, Security Essentials, for Windows XP. When XP went off support, it was denied access to Security Essentials. Thus, XP machines remain vulnerable<\/strong> to WannaCry, just not via file sharing on a LAN.<\/p>\n

To fully<\/em> protect an XP machine requires a third party antivirus product. Lotsa luck with that.<\/p>\n

BitDefender bragged today<\/a> that they can protect against WannaCry<\/a>, but they do not support Windows XP<\/a>. Neither does Avira<\/a>, Trend Micro<\/a> or F-Secure<\/a>. Kaspersky<\/a> still supports XP, but their website says nothing about WannaCry.\u00a0<\/p>\n

So, yes, Microsoft released a patch for Windows XP. But now you know the rest of the story.\u00a0<\/p>\n

FEEDBACK
Get in touch with me privately by email at my full name at Gmail. Public comments can be directed to me on twitter at @defensivecomput<\/p>\n

http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Credit to Author: Michael Horowitz| Date: Sun, 14 May 2017 12:56:00 -0700<\/strong><\/p>\n

\n
\n

Microsoft just released a patch for Windows XP that fixes a file sharing flaw being exploited by the WannaCry ransomware<\/a>. Here’s how to install it.\u00a0<\/p>\n

You can download some<\/em> versions of the patch using links at the bottom of this May 12th \u00a0Microsoft article: Customer Guidance for WannaCrypt attacks<\/a>. The full list of patch variants, including languages other than English, is in the Windows Catalog, just search for KB4012598<\/a>. Windows Update does not work on XP.<\/p>\n

To read this article in full or to leave a comment, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[10629,11072,714,11079],"class_list":["post-7637","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-cyberattacks","tag-cybercrime-hacking","tag-security","tag-windows-pcs"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/7637","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=7637"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/7637\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=7637"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=7637"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=7637"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}