Link to home
Start Free TrialLog in
Avatar of wajhiuddin
wajhiuddin

asked on

Microsoft Patch for RanSomeware

We urgenlty need whch patch we need to install to pretect cliens with RanSomeware
Avatar of Lee W, MVP
Lee W, MVP
Flag of United States of America image

So? Patch!  It's been available on Windows Update Since March.  If you patch, you should be protected from THIS ransomware.  There are still THOUSANDS of variants out there, so use a firewall, spam filter, EDUCATE YOUR USERS, make SURE you have GOOD backups, including OFFLINE COPIES!
Avatar of wajhiuddin
wajhiuddin

ASKER

Lee, I am talkilng about client who didn't patch for soem times and which patch we can send them to be protected. We just need a list ot patches which will prtect them with Ransoemware
ASKER CERTIFIED SOLUTION
Avatar of Shahnawaz Ahmed
Shahnawaz Ahmed
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
KB4012598 for windows 2003 & XP
clinets are on the field don't have ability to donwload pathces by them self we need to send them .msi or .exe So I need to know the exact name or number of the path which I can downlaod and send to them to run or install.
I believe you are referring to WannaCry ransomware. Then you can check out MS17-010 to patch and on top of that, disable SMBv1
https://technet.microsoft.com/en-us/library/security/ms17-010.aspx
You need to find out which version of Windows they are running then send them the specific update for  the correct architecture (32/64bit)

Patches for XP, Vista, Windows 8 and Server 2003 & 2008
http://www.catalog.update.microsoft.com/Search.aspx?q=KB4012598


Patches for all other current versions of Windows (Including Vista SP2 and Server 2008 SP2)
https://technet.microsoft.com/en-us/library/security/ms17-010.aspx
This doesn't make sense.  If your clients can't patch from Windows Update then they aren't on the internet.  If they're not on the internet the threat from this is near non-existent as someone would need to bring it to this "secure" network, which seems VERY unlikely.  

At a minimum, when requesting assistance, you should provide enough information so we understand your circumstance!
importantly, remember to restart machine to effect the patch. You will need to plan downtime for the server so as not to affect mass users that may have persistent connection to it, the client machine will be more straightforward since it tends to restart daily in normal circumstances.
Seconding the recommendation to patch *and* disable SMBv1. Nothing Microsoft has released after XP needs it, but there may still be NASes or similar devices that use it (because the developers are lazy jerks). If you have network devices that use SMBv1 in your environment, see if they have updated firmware that fixes that issue. If not, only let computers that *need* to access those devices have SMBv1 running and/or get new devices that don't support it. This exploit in SMBv1 is just the first in what will probably be a long, long line of exploits that will be discovered and used in the future, so just get rid of it if you can.
OK Clinets don't have permissions to downlaod patches thats how simple it is We send them pathces to insall manually.
I download patches from following link
https://technet.microsoft.com/en-us/library/security/ms17-010.aspx

 and try to instlal few of them but getting an error mesage
Uptdate is not applicabl to your computer
It was a 64 bit patch for windows 7 64 bit ?
OK does any one know how  to install patches KB.....msu  unattended? . I am atrying to creat a bat file and need to kow what are the switches
Windows 7 for 32-bit Systems Service Pack 1 (4012212) Security Only[1]
Windows 7 for 32-bit Systems Service Pack 1 (4012215) Monthly Rollup[1]
https://technet.microsoft.com/en-us/library/security/ms17-010.aspx
OK i have got the following link by some techs already so please dont send me the link becasue it would t be fair if I give the credit to everyone
https://technet.microsoft.com/en-us/library/security/ms17-010.aspx

Thanks
I know and I am just stating it because you need 32 bit and the bulletin already has those link to the download. Do not misread my intent.