Super User
Super User

Questions tagged [wannacrypt]

Wannacry is a ransomware computer worm that targets the Microsoft Windows operating system.

19 questions
25
votes
4 answers

How to check if a specific Windows security update is installed?

Given that the WannaCry ransomware exploit is going around I wanted to check if my computer has the specific security update that should stop the vulnerability - apparently, MS17-010, assuming I'm understanding the vulnerability and that is indeed…
dluxcru
  • 375
9
votes
1 answer

What is the implication of MS17-010 patch and SMBv1 deactivation related to WannaCry? Does it remove the malware or just stop it from propagating?

I googled a lot about this but could not find the answer. I would like to understand if patching Windows with the MS17-010 update will prevent WannaCry malware from installing/executing or just prevent the malware (once installed on a certain PC and…
Antony
  • 193
  • 1
  • 4
5
votes
1 answer

Which particular updates fix the WannaCry enabling SMB "flaw"?

When WannaCry struck a couple of days back, it was understandable that many computers did not have the SMB "flaw" patched, due to many people being discouraged due to MS's practices of pushing telemetry (or maybe just call it spyware?) and nagging…
dtech
  • 240
  • 2
  • 4
  • 13
3
votes
1 answer

WannaCrypt - Localized XP Patch installation fails

In my company we have a couple of Windows XP machines around for running legacy software. One of them is in Windows XP SP3 English and the other in Windows XP SP3 Greek (don't ask, I just found them this way when I came to the company). My issue is…
gemantzu
  • 155
2
votes
1 answer

If SMBv1 client/server are disabled, do I still need MS17-010 patch?

I don't understand this one: There are contradictory things I read about how to mitigate WannaCry incident, some say if SMBv1 client and server are disabled, MS17-010 patch is NOT required, others say even if SMBv1 client and server are disabled,…
elekgeek
  • 193
2
votes
1 answer

Is there a WannaCry patch for Windows 8 Embedded?

MS17-010 doesn't appear to support Windows 8 Embedded. The patch that came out with Windows Updates in March supports Windows 8.1. There are links to manually downloading the patch KB4012598 for Windows 8 (Doesn't mention embedded) but they don't…
user729247
  • 21
  • 1
1
vote
0 answers

How to check packets on Not Attached Wireshark

I am currently running Windows 7 VirtualBox on my Windows 10 host. However, I do not want to connect them to each other since I need to check the packages being transferred when WannaCry is running. So, is there any way of safely attaching my…
BillyBonky
  • 11
1
vote
1 answer

Safe to boot Windows 8 that hasn't been patched in ~6 months?

I'm mainly a Linux user, but every now and then have to boot into Windows. So my Windows system can only get patches when I'm booted into it, and at present, that means it hasn't been patched in like half a year or so. Now with worms like WannaCry…
KarenRei
  • 123
1
vote
1 answer

WannaCry patch for Vista; says not applicable

I have an old Vista laptop running Vista (32 bit). I tried to install Microsoft's patch for WannaCry from http://www.catalog.update.microsoft.com/Search.aspx?q=KB4012598 When I try to install the Vista patch (not the 64-bit; the 3rd one in the…
DGor
1
vote
1 answer

Windows 7 WannaCrypt Patch/Update

Running Windows 7 Professional. It appears that the proper patch/update for me to protect against the wannacrypt virus is KB4012215. I reviewed my Windows Update history and see that I tried to install that update on 3/18/17 but the installation…
Moe1000
  • 29
  • 1
  • 2
0
votes
0 answers

How is WannaCry virus affecting my Debian install and what can I do to recover the files with the “.want_to_cry” extension?

I just find out that my Debian laptop is somehow infected with WannaCry virus. I will try to describe my set up: My laptop has two partitions - one for Windows - one for Linux. Recently (last 6 months) I did a fresh install of Debian Stable + XFCE…
George Vasiliou
  • 301
0
votes
1 answer

Why does nmap report these samba ports as open?

I have an AWS server running linux. When I do an netstat -lntp from the machine itself, it shows me a few ports open (as expected), but it does not show 445 or 139. This makes sense, since I have never setup samba on this machine. Furthermore,…
DatsunBing
  • 437
0
votes
1 answer

SMBv1 installed, but is it enabled

With the whole WannaCry issue our headquarters wants to disable SMBv1. Our shop received a few servers that they are stating has SMBv1 on. I have scanned the servers with Get-WindowsFeature and Get-WMIObject win32_optionalfeature and only one…
user3451049
  • 13
  • 2
0
votes
2 answers

Will turning off File and Printer sharing work as a basic defence against WannaCry network transmission?

Scenario: Update patches are not available Mail access is not available (which means no clicks on malacious links) Will disabling File and Printer Sharing protocol in individual Network Adapter Settings act as a primary defense against Wannacry…
Glitch
  • 414
0
votes
0 answers

Will you see ransomware activity like WannaCry in Resource Monitor?

I understand that in order to encrypt terabytes of data, a ransomware must work hard for hours on HDD and perhaps for under an hour on SSD. So it has to leave obvious signs of doing so.. right? Would a ransomware be visible in Windows Resource…
Boppity Bop
  • 2,663
1
2