[Boards: 3 / a / aco / adv / an / asp / b / bant / biz / c / can / cgl / ck / cm / co / cock / d / diy / e / fa / fap / fit / fitlit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mlpol / mo / mtv / mu / n / news / o / out / outsoc / p / po / pol / qa / qst / r / r9k / s / s4s / sci / soc / sp / spa / t / tg / toy / trash / trv / tv / u / v / vg / vint / vip / vp / vr / w / wg / wsg / wsr / x / y ] [Search | Free Show | Home]

SCRIPT KIDDIES GOT HOLD OF NSA TOOLS AND NOW WE HAVE THE BIGGEST

This is a blue board which means that it's for everybody (Safe For Work content only). If you see any adult content, please report it.

Thread replies: 371
Thread images: 63

File: map.jpg (19KB, 510x286px) Image search: [Google]
map.jpg
19KB, 510x286px
SCRIPT KIDDIES GOT HOLD OF NSA TOOLS AND NOW WE HAVE THE BIGGEST WORM SINCE MS08-067 AND THE WORLD IS ALREADY GETTING BTFO AND IT ONLY JUST STARTED

BASED SHADOW BROKERS

WINKEKS ETERNALLY BTFO
>>
File: 1485462880851.jpg (70KB, 419x475px) Image search: [Google]
1485462880851.jpg
70KB, 419x475px
>mfw windows 7 got a patch for this in march
>>
>>60350227
>disable Windows Updates because they are annoying and force me to restart your computer every now and then
>oh noes I have been pwned using a vulnerability that was fixed months ago, fucking Microsoft!!111!
>>
>>60350329
if only microsoft separated security updates from "content" updates (read: bloatware) for consumers, not just enterprises

haha that would be crazy though how silly
>>
>>60350329
They should give Arch Linux a try. You get addicted to always having your system up-to-date so you can't help but running (sudo) pacman -Syu multiple times a day. In fact, I'm going to do it right now...
>>
um, I'm running Windows 7 and am not really very up to date with all the patches. How do I know if I've been hacked?

not a joke btw
>>
>>60350405
Consumers should be treated as retards by default and they do nothing but proving this philosophy right. The best thing that Microsoft has ever done regarding security is making updates mandatory on Windows 10 Home, so stupid people can't disable them just because they're annoying and then get pwned and blame Microsoft for their incompetence.

If you consider yourself a pro user, you should get the Pro version, which let you be as retarded as you wish with regarding updates.
>>
Im from Argentina, all the pc from me work have been affected by this virus.
>>
>>60350227
i wanna get infected. Im on windows 10 any help?
>>
If script kiddies got a hold of them that means they're available for public download somewhere.

Microsoft is fucked now.
>>
>>60350596
its already been patched just people dont update there windows
>>
>>60350586
Look up eternal blue and try breaking into your own pc from another one
>>
>>60350227
1. Patch it
2. Use a firewall
3. Don't use SMB 1.0 at all, ever
>>
AHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAH

*takes deep breath*

AAAAAAAAAAAAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA
>>
isnt this just eternalblue + some romanian malware?
>>
File: 1483309955164.jpg (84KB, 499x500px) Image search: [Google]
1483309955164.jpg
84KB, 499x500px
>>60350529
>ignore the entire post
>wank about your superiority
Let me explain in the little words you understand.

3D Paint and Candy Crush bad. Cumulative security patches good. Microsoft don't understand. Microsoft lump bad with good. People sad, so people not want either.
>>
>>60350664
yes, but eternalblue means now EVERYONE GETS IT

I feel bad for innocent people affected by this

on the other hand...this may be a necessary learning experience so I'm kinda happy it happened.

Would be much cooler if it was just like an annoying thing telling normies to learn some security or something instead of just ransomware
>>
Will I be forced to install Windows 10 if I re-enable Windows updates? Or did MS finally lay off that shit?
>>
>>60350656
*takes a deep breath*
kys
>>
>>60350697
fucking destroyed
>>
File: tumblr_omkehosTQM1utpgllo3_400.png (20KB, 287x248px) Image search: [Google]
tumblr_omkehosTQM1utpgllo3_400.png
20KB, 287x248px
so where an how are you supposed to get infected by this
>>
>>60350739
shut up its fucking hilarious. Most normies will go on about their day and just pay the ransom or clean install. But some closer to the border will investigate and get curious about linux.

and I'm trying to act like I find it funny to mask the feeling of extreme sadness for everyone affected.
>>
>>60350488
did you get a pop-up asking for 300$ today? If not you're fine.
>>
>>60350801
>have a windows installation with server components installed and not have the MS17-010 patch installed
>have a weak firewall or no firewall
>computer gets infected p2p
>>
How the fuck did they get infected?
>>
>>60350845
what p2p are we talking about? torrent? havent pirated since 2015 cus all the sites are fucking shut down anyways
>>
>>60350543
Que pelotudo
>>
>>60350870
no, p2p as in it spreads on it's own from computer to computer without requiring any other vector
>>
>>60350697
>b-but muh bloat!
>Paint 3D

Wew lad, those 35 MB of hard disk space and the 0,005 s faster startup sure are worth letting Russians fuck you in the ass.
>>
File: og_image.png (924KB, 1200x630px) Image search: [Google]
og_image.png
924KB, 1200x630px
Who FagOS for their daily browser here?
>>
>>60350887
peer to peer implies that im connecting to someone else's machine
does my machine just randomly touch balls with yours or what
>>
File: 1466769558679.jpg (8KB, 225x225px) Image search: [Google]
1466769558679.jpg
8KB, 225x225px
>>60350895
So you've had it clearly explained to you why people don't like Microsoft's update policy, and your only response is
>muh muh xD

You are in the wrong, and Windows 10 market penetration shows that. Consumers do not want what you are selling. Period. Fix your update model or enjoy being complicit in virus outbreaks.

>b-b-but I know best!
Apparently you don't, or people would actually keep Windows Update active.

>>60350923
basically yes, through the SMB protocol
>>
>>60350887
>FagOS for their daily browser here?
https://en.wikipedia.org/wiki/Peer-to-peer#Applications

Any of these then?
>>
>>60350964
why can't you just fucking google an explainer or some shit

https://www.theregister.co.uk/2017/05/12/spain_ransomware_outbreak/

>It's understood the software nasty is wielding the leaked NSA cyber-weapon EternalBlue, which attacks SMB file-sharing services. "[The] infection vector is unknown but suspect internet facing machines are spreading infections exploiting a Samba vulnerability
>>
>>60350923
You've never had a system with a public facing address, have you? Russians and Chinese try to break in 24/7.
>>
>>60350845
Does that include vista pro ?
>>
>>60350902
My desktop is a hackintosh, my laptop is Ubuntu. Today I get to put my feet up and laugh as the world burns.
>>
>>60350329
underrated and should be spambotted in every windows thread
>>
AM I SAFE IF MY DESKTOP IS IN HIBERNATE MODE OR DO I NEED TO DRIVE TO MY PARENTS HOUSE AND UNPLUG THE FUCKER
>>
File: fjxkgj.jpg (93KB, 480x360px) Image search: [Google]
fjxkgj.jpg
93KB, 480x360px
I live in Finland. Not a single computer here has been infected because we keep our systems updated.

You faggots who think you know better than Microsoft surely got BTFO
>>
>>60350985
https://technet.microsoft.com/en-us/library/security/ms17-010.aspx
>>
>>60351015
DO IT FAGET YOUR PARENTS WANT TO SEE YOU ANYWAY
>>
>>60350902
T420 hackintosh here, feels good man
>>
File: dasdsadsa.jpg (523KB, 989x696px) Image search: [Google]
dasdsadsa.jpg
523KB, 989x696px
Which of these updates is the one that fixes the hole?

Which of these is the one that forces me to install Windows 10?

I'm on Windows 7.
>>
File: just sit back and relax.png (101KB, 1139x555px) Image search: [Google]
just sit back and relax.png
101KB, 1139x555px
>>60350959
>Windows 10 market penetration

Microsoft is finished and bankrupt for sure
>>
File: 1485218604693.jpg (11KB, 170x213px) Image search: [Google]
1485218604693.jpg
11KB, 170x213px
>>60351001
>underrated
>argument thoroughly destroyed itt already
>>
>>60350227
This is not funny, retard. The script kiddies targetted hospital and it has endangered people's life as a result.
>>
>>60351015
Dude your parents house is already gone, along with the entire western sea board. Run before it's too late.
>>
File: 1490674400379.jpg (127KB, 500x500px) Image search: [Google]
1490674400379.jpg
127KB, 500x500px
>>60351038
https://www.theinquirer.net/inquirer/news/3005602/windows-7-market-share-rises-at-the-expense-of-windows-10
>fucking up so badly you lose users to your own decade old OS
>>
only win7? what about win8?
>>
>>60350870
If one computer on a LAN is infected it's capable of using window's built in networking home-groups shit to spread to the other computers on the LAN. To spread from the internet to a computer it has to either bypass the NAT firewall or be installed through an exploit(in this case email)
>>
>>60351065
Windows XP, Vista, 7, 8, 8.1, and 10 are vulnerable.

Vista and newer had a patch released in March that fixed the issue, so if you're up to date you're fine.

XP is insecure but that's just a given. Also, it's possible that earlier Windows versions (ie 2000) are at risk.
>>
>>60350980
Thanks, I didn't know where to look!
>>
>>60350227
Wincucks BTFO ahahahaha
>>
>>60351037
install gentoo before it's too late
>>
>>60350727
>>60351037

do a fucking google search it is literally the first result.
>>
>>60350727
google "windows 7 updates to avoid"

install all the security updates

don't install "recommended" updates unless something's broken
>>
File: 1481667302128.jpg (85KB, 992x558px) Image search: [Google]
1481667302128.jpg
85KB, 992x558px
>>60350227
comfy as fuck
>>
Wait theres's a W7 patch for this? Which one? I disabled updates long ago like everyone else
>>
My hospital uses fucking Windows ME on some of their computers.
>>
>>60350715
how did they get it tho?
>>
>>60351088
Will you say "Wincucks BTFO" again when your father die in his hospital bed because his hospital got fucked and can't do anything because of the lock?
>>
>>60350715
how do you get the virus? Clicking a dodgy email link ?
>>
>>60350227
>>60350263
Wonder how much of our infrastructure is running Windows though. Even linux niggers might be without internet if things ever got really bad
>>
>>60351150
>disabling all updates instead of blacklisting telemetry updates
you're a retard

here's a list of toxic updates:
http://forums.pixeltailgames.com/t/windows-7-8-windows-updates-to-avoid-telemetry/9977

blacklist them in windows update (right click them and hide update)

then install only important, not recommended updates

enjoy you are security
>>
>>60351150
>having to disable critical security updates just to make your system usable
haha. never change, Windows
>>
File: 1494611171834.png (313KB, 1279x512px) Image search: [Google]
1494611171834.png
313KB, 1279x512px
My dad just died because the crumpet biscuit machine in hospital was infected so the nurses tried to make him some crumpets but accidentally stabbed him with the butter knife cor blimey.
>>
>>60351247
good riddance. probably a crumpet junkie anyway
>>
>>60351208
Its self-propagating. Its a worm. You don't need to do shit.
>>
>>60351239
Why not disable tasks in scheduler + some services instead? Of course modifying policies can be useless but disabling the actor is enough, isn't it?
>>
File: android-dark-matter-syfy.jpg (18KB, 600x600px) Image search: [Google]
android-dark-matter-syfy.jpg
18KB, 600x600px
So hold the phone

Is Win10 vulnerable here?

And if so, what patch needs to be installed to fix?
>>
>>60351241
you don't have to, but retards do anyways because it's easier than googling "which windows 7 updates to avoid"

>>60351315
because some people don't want microsoft installing stupid shit to begin with, it's better to cut the problem off at the source
>>
>>60351215
practically none, most sensible hardware runs on loonix
>>
what about dual boot faggots? will this kill their loonix partitions as well
>>
>2017
>Not using Gentoo
why are you even on /g/?
>>
>>60351327
Some of shit MS installs is actually preventing exploits so why not disable just the bad shit? I am on 7 and done so. I had a temptation of using Aegis but this works too, why bother with Aegis?
>>
>>60351330
>incorrect and ignorant statement
>>
>>60351208
yeah its an attachment, encrypted of course but i think passed off as a pdf but that probably varies
>>
File: NUKES.png (105KB, 502x278px) Image search: [Google]
NUKES.png
105KB, 502x278px
GET OUT OF AMERICA
GET OUT OF AMERICA
GET OUT OF AMERICA
>>
>>60351321
1. Yes
2. All the security patches from March. They should already be installed.

>>60351370
see

>>60351239
there is LITERALLY A LIST of which updates are malware and which updates are security
>>
File: Untitled.png (367KB, 2560x1440px) Image search: [Google]
Untitled.png
367KB, 2560x1440px
>>60350329
fite me :^)
>>
>>60351389
what map is that? it's not this one (https://intel.malwaretech.com/botnet/wcrypt)
>>
>>60351402
Who's yulia?
>>
>>60351208
That's one way. Read up on EternalBlue. Then realize the current patch may have not been enough. There was an exploit against a database (can't remember which) recently that got patched and almost immediately the attackers found a work around. If I remember correctly, the devs were virtually fighting blow for blow for a few days trying to stop whoever was using this zero day.
>>
>>60351392
Haven't used wangblows in a while (dualbooting)

Guess I should be fine if I just do a general update, right?

Nothing bad lurking in the updates after march?
>>
>>60351402
XDddddd

:^)
>>
>>60351422
It's my name. Why?
>>
File: 1386604149110.jpg (752B, 250x250px) Image search: [Google]
1386604149110.jpg
752B, 250x250px
>>60351378

>Says someone made a factually incorrect statement
>doesnt provide facts.
>>
File: 1494253961864.jpg (48KB, 670x503px) Image search: [Google]
1494253961864.jpg
48KB, 670x503px
>tfw ran out of space to back up
>new disk coming on monday
>about half a tb of animoos on the line
>>
>>60351440
Funny way to spell Ivan.
>>
>>60351428
They re-issue the telemetry updates periodically. The version number gets a bump so that they show up again even if you've blacklisted them. You have to re-check for those every time you update if you want to keep them out. Yes, of course its deliberate.
>>
>>60351378
He plainly stated "sensible". That excludes Microcock products.
>>
>>60351428
If you dont get infected while downloading the update.

It will be most likely rogue and get into windows servers at some point if it doesn't get stopped before next week.

Can you imagine this randomware distributing itself to billions of computers and tablets via windows update?
>>
>>60351460
>saying something incorrect and putting the burden of proof on anyone who refutes you
>>
File: 1474346315633.jpg (34KB, 600x485px) Image search: [Google]
1474346315633.jpg
34KB, 600x485px
>>60351482
>Win7fag collective faces when all of Windows 10 is compromised by an infected update server
>>
>>60351482
muh dick...
>>
File: itsover.png (125KB, 501x277px) Image search: [Google]
itsover.png
125KB, 501x277px
>OLYMPUS HAS FALLEN
its over
>OLYMPUS HAS FALLEN
its over
>OLYMPUS HAS FALLEN
its over
>OLYMPUS HAS FALLEN
its over
>OLYMPUS HAS FALLEN
its over
>OLYMPUS HAS FALLEN
its over
>>
>>60351178
Not if his father used Linux
>>
Why should I care?
>>
>>60351480
this guy got me
>>
>>60351462
>tfw 10tb
>>
>>60350902

I'd like to have a Hackintosh.
>>
>>60351392
>there is LITERALLY A LIST of which updates are malware and which updates are security
Appatently, nobody bothered to check, they just read the licenses.
>>
>>60351047
moralfag pls go
>>
>>60351561
you dont have to, like most things, its just a big deal;

>landed in hospitals, over here NHS has gone melt down-mode
>will prob lead to media campaigns against cryptocurrencies
>>
>>60351523
which map is that give link plz
>>
Is it too late to update now?
>>
File: Tim kek.jpg (5KB, 237x213px) Image search: [Google]
Tim kek.jpg
5KB, 237x213px
>>60351482

>Can you imagine this randomware distributing itself to billions of computers and tablets via windows update?
>Can you imagine this randomware distributing itself to billions of computers and tablets via windows update?
>Can you imagine this randomware distributing itself to billions of computers and tablets via windows update?
>Can you imagine this randomware distributing itself to billions of computers and tablets via windows update?

It would be a presentation joke at the next WWDC.
>>
>>60351482
maybe I should become a tech support to teach people how to install and use GNU/linux on their laptops that have been infected. Sounds lucrative.
>>
File: 1476989288534.jpg (49KB, 540x510px) Image search: [Google]
1476989288534.jpg
49KB, 540x510px
How do I install gentoo pls help
>>
File: death.png (249KB, 507x280px) Image search: [Google]
death.png
249KB, 507x280px
end of transmission
>>
>>60351482
I really hope it happens, /g/ would fucking explode and basically be the sites main hub for at least a week.
>>
wonder what impact this'll have

doubt it'll sway UK gov't laws regarding privacy
>>
>>60351634
https://antergos.com/

Here, get out of Windows while you still safely can.
>>
>>60351674
Yeah, I was planning to do it long time ago but I'm lazy cunt. I'm gonna do it right now.
>>
>>60351656
Probably fuck all
>>
https://mobile.nytimes.com/2017/05/12/world/europe/uk-national-health-service-cyberattack.html?smprod=nytcore-iphone&smid=nytcore-iphone-share&_r=1&referer=https://www.rt.com/news/388153-thousands-ransomeware-attacks-worldwide/
>>
>>60351701
>smprod=nytcore-iphone&smid=nytcore-iphone-share&_r=1&referer=https://www.rt.com/news/388153-thousands-ransomeware-attacks-worldwide/
>on an iPhone, visiting the NYT through Russia Today
lol
>>
>>60351512
Microsoft its the only one to blame.
It has the most tech illiterate userbase -memes aside-, they don't teach their users how their OS works, hence most of them have no idea about their updates or what build are their running.

Ask any normie what windows versions are them running and they will reply with "uhm, i think it is the lastest one".

Sure, macOS has a retarded userbase but at least they try to know their OS in the attempt of looking tech savy and trying to justify a +$2k device.

Goverment agencies, hospitals and pretty much any workplace runs outdated versions of windows, or just plain release date builds. These places are vulnerable since every place will most likely disable any kind of update to prevent then from messing with their servers or just creating an unestable enviroment, if the computers works fine with W7 they will leave them running that for all the device service time.

Then you have users killing their updates because of the move that MS trying to do with windows 10. Most of those users are running a 2 years outdated W7 just because of Microsoft's fault.

Sure, most of the users don't have to give a shit about their patches and they will blame people for launching updates or patches now and then. However this is just an example of what happens when a customer has not understanding about their OS and the enviroment they are working on.

If you have a Windows machine at your workplace just backup your files and wait for some retard to infect all the machines.

If you have one at your place -again, memes aside. Not gonna argue about your device choices- pull the plug out of it a couple of days. We don't know if those hackers are modifying the code to make it cover another vulneability right now.

The only think I know -or at least i suppose- is that you don't want to wake up and stare at your windows computer blocked because the ransomware was modified.
>>
File: file.png (513KB, 1365x767px) Image search: [Google]
file.png
513KB, 1365x767px
>>60351722
No I'm not. It's the top link on Hacker news, I just followed it. I didn't even look at the link or realize that I was looking at a mobile site. Great investigative skills though.
>>
>>60351801
>hackernews doesn't strip referrers from submitted links
interesting
>>
File: 1494559418998.jpg (55KB, 657x321px) Image search: [Google]
1494559418998.jpg
55KB, 657x321px
>>60351498
>muh burden of proof maymay
Prove to me that you have never been a Redditor.
>>
>>60351787
wtf are the sysadmins up to

the NHS is the like the 5th largest employer in the world and IT is essential, they already had a fuck up with Atos
>>
>>60351656
Probably not a lot, but globally we must eradicate all encryption and prevent this happening again.
>>
>>60351832
>prove X is untrue
you really don't get how the whole concept of proof works do you
>>
File: Pete the frog screeching.jpg (40KB, 900x900px) Image search: [Google]
Pete the frog screeching.jpg
40KB, 900x900px
>>60351787
>work computer runs the the default installation of Windows XP with the default installation of Word 2000
>everybody gets mad that formatting gets fucked to shit between it and the new Windows 10 computers
>boss can you please give me an upgrade
>NO IT WORKS FINE
>mfw
>>
File: Capture.png (5KB, 442x154px) Image search: [Google]
Capture.png
5KB, 442x154px
We're gucci
>>
let me understand something.
there is a small music school near me ran by an old couple. they have ancient PCs that can barely run XP.

they have a consumer router with no open ports. does that make them immune from the attack?
>>
File: 1390053175893.png (136KB, 396x381px) Image search: [Google]
1390053175893.png
136KB, 396x381px
>>60351865
which is why religions exist, because of your faggotry

>prove to me god doesnt exist!
>HA! YOU CANT That means god exists!
>>
>>60350543
Por pelotudo
>>
>>60351834
Sysadmins don't give a fuck about updating or modifying the OS at their.

A linux IT guy doesn't want to argue for 40 minutes having to dealt with the dumb blonde about their office computer having a different behavior after running an update.

Just sit down and enjoy the show. Maybe give your parents a call and tell them not to touch their MS laptop for a couple of days if you want to be nice, if they get infected you will -most likely- have to clean the mess anyway.
>>
I can't update W7, something with svchost. It's only a matter of time before I get pwned.
>>
>>60351787
No one's gonna modify anything. This exploit uses two month publicly disclosed vulnerability, that's all. NSA ain't gonna give undisclosed 0days to random script kiddies, so they earn more $$$.
>>
>>60351905
You still don't get it, you're really fucking dumb.

>Prove you've never been a redditor
An implicit affirmative claim he's a redditor, burden of proof is on you

>Prove god doesn't exist
An implicit affirmative claim god exists, burden of proof is on you
>>
>>60351912
>you will -most likely- have to clean the mess anyway
there is nothing to clean in this case: either you pay, or you lose all data and have to reinstall. it's not just an annoyance.
>>
>>60351912
kek. Was just thinking about telling my mother but she'll still need to use it for employment searches..
>>
>>60351422
his mom
>>
>>60351893
Well from the worm part of it they are. I believe it cannot pass through a firewall that blocks all incoming traffic. If they click on a suspicious link or open suspicious emails they could still get it though. Once one computer on a network gets it the worm tries to infect every other computer on the network.
>>
>>60350227
Ah, the good old case of enterprises and their "muh backwards compat".
Believe me, nobody at MS likes SMB1. I read their salty tweets every day.
Hackers like SMB1, and enterprises with faxes in their AD like SMB1.

If you're a Windows admin, this is the bare minimum you should be aware of.
https://adsecurity.org/?p=3299
In here is also the topic of MS17-010: SMB1.

>The PowerShell command can disable SMB v1:
Set-SmbServerConfiguration –EnableSMB1Protocol $false


So, to give my opinion, this is nothing fucking new. Oh wow, SMB1 was insecure, like anyone wasn't aware. Now us Windows admins finally have a good reason to go to our executives and tell them our stupid printers scanning to SMB shares with SMB1 are a direct security risk.
It's the exploit we've all been waiting for. The exploit that will make us replace Server 2003, our fax machines, our old share-scanning printers.

The project lead at MS for SMB and other MS storage stuff tweets (shitposts) daily about SMB1 and why you're pretty stupid for at least not AUDITING your SMB traffic.
https://twitter.com/NerdPyle
>>
The funniest part of all this is that the IT monkeys who failed to update the systems for months and let them get hacked will be hailed as the heroes for running some malware removal tool.
>>
File: iVHfwLc.gif (4MB, 356x200px) Image search: [Google]
iVHfwLc.gif
4MB, 356x200px
>>
>>60351927
https://support.microsoft.com/en-us/help/3200747/
>>
>>60350543
La concha de la lora. My suster is using my win8 pc. How fucked am I?
>>
>>60351893
No. This is a post-exploitation exploit. It makes it easier to pwn the rest of the network when one machine has been compromised.
>>
>>60351961
Yeah, I classified it as a mess because you will have to got to your parents place, do a clean install, hear them talking about computers being scared and other tech conspirancies.

Having them to tell you their computers is working weird on a paranoia syndrome, reinstalling all their programs, trying to recover all their documents and else.

The best part of all this is that you will catch some good deals from places like best buy and such if they get their network infected since they will think the computers are unusable and wasted.
>>
thanks NSA
>>
>all these retards updating and backing up files AFTER shit went down
You seem to be missing the point of security updates and backups.
>>
>>60350543
Jajaja boludo.
>>
File: 8mxwg8gprrux62uu42p1_400x400[1].jpg (16KB, 400x400px) Image search: [Google]
8mxwg8gprrux62uu42p1_400x400[1].jpg
16KB, 400x400px
>>60352071
NSA will never be blamed sadly it will just create more bureacracy in the NHS and dodgy privacy/encryption laws
>>
>>60352071
ur welcum :^)
>>
So I'm fine if I just update windows past this March?
>>
>>60352176
Enjoy getting infected while updating.
>>
>>60351886
im looking at installed updates which one prevents this shit?
>>
>>60352176
Practically this
>>
File: 1490870709203s.jpg (2KB, 125x100px) Image search: [Google]
1490870709203s.jpg
2KB, 125x100px
Haven't updated Windows in 3.5 months, am I safe g-guys?
>>
>>60352211
https://technet.microsoft.com/en-us/library/security/ms17-010.aspx
>>
>>60352227
No, update immediately.
>>
So i got the virus guys.
I went to starbucks earlier today and connected to their free wifi
Now i cant use my computer
>>
>>60351997
I did this the second I read about the contents of the ShadowBrokers dump. There's no way in hell I'm taking Microsofts's word about having patched such a high profile vuln. Google calls them out for their shitty reaction times to exploits quite frequently. Pretty sure Windows just released an update that patched 55 fucking security issues just this week.
>>
>be me
>start of March
>March security update released
>install it
>we couldn't finish the updates, sorry :(
feeling like this is going to be my switch to Linux
>>
File: 1416499808941.jpg (4KB, 119x110px) Image search: [Google]
1416499808941.jpg
4KB, 119x110px
>>60352227
>Haven't updated since 2015.
>>
>>60352278
install gentoo
>>
So guys. What if microsoft it's behind this? For all we know they will get a shiton of koney if people are forced to update their faxs and shit
>>
File: 1459344581528.jpg (30KB, 515x644px) Image search: [Google]
1459344581528.jpg
30KB, 515x644px
>mfw normalfags are sending me emails saying their machine got compromised and they don't have any backups
>>
>>60352106
This. If you use Windows, you should have been shitting your pants at the thought of this. It's been, what, nearly a month now, that this was pointed out? People began using Eternalblue the moment it was released.
>>
>>60352327
You kids are so fucking dumb
>>
>>60352358

Tell them to send their machines over for repair.
>>
>>60351787

>macOS has a retarded userbase

Its the same as the average Windows userbase, you people need to fucking get outside and talk to people. There's no specific demograph for these 2 major OSes, everyone uses them.
>>
>>60352378
And it's been patched since before eternalblue leaked
Imagine that!
>>
>>60352358
>wear a super hero cape
>"help" them saving the $$$
>profit???
>>
>>60351038
>>60351060
If Microsoft had balls, they announce free upgrade to Windows 10 again except this time they include pirated versions of all Windows versions around the world to be included in the upgrade instead of only official versions.

What would happen if every windows version around the world became official versions for free, overnight or should I say in one year?
>>
They should've also ported WannaCry to macOS, to make faggots' lives less easier.
>>
>>60352400
And yet, here we are!
>>
>>60350465
pacaur masterrace tho
>>
>>60352417
but they already did that


during the free upgrade push ANY copy of windows would upgrade to a legitimate copy
>>
>>60350465
that is the case with any good package manager

Windows is shit on all levels
>>
>>60352427
I'm running a shitload of unpatched vms just to be a dick. I always root for the underdogs.
>>
>>60352448
Was it permanently free or for only 6 months after installing ?
>>
File: 1477670179245.jpg (39KB, 500x379px) Image search: [Google]
1477670179245.jpg
39KB, 500x379px
>>60352417
Pirates COULD and DID use the free upgrade to 10 when it was available, including me. Any crack that passed Windows Genuine authentication would let you upgrade to Windows 10. I used it for half a year and went back to Windows 7 Ultimate.
>>
>>60351482
Stop it
my dick can only be so hard
>>
>>60352481
The update window was free for a year
The license would be legit forever
>>
>>60351482
Elliot could only dream of this
>>
so somebody made alot of fucking money the last and next 24h
>>
>>60350488
use wsusoffline and update ur shit
>>
My question is: how do I get this virus?
>>
>>60351482
realistically speaking this has 0% chance of happening
although it would be interesting for sure
>>
File: 1493433290405.jpg (29KB, 600x456px) Image search: [Google]
1493433290405.jpg
29KB, 600x456px
>see this on the news
>/g/ tells me to install updates
>do that
>PC is now installing Windows 10
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

FUCKING GODDAMN SHITLORDS YOU FUKCING SAD IT WAS SAFE GODNAMINT
>>
>>60352599
GNU/Linux does not have this problem
>>
File: 1470596358054.jpg (62KB, 720x1080px) Image search: [Google]
1470596358054.jpg
62KB, 720x1080px
>>60352599
WINDOWS 10
BARGING INTO YOUR LIFE
NO CRUISE CONTROL 4 U
>>
>>60352599
this better be a fucking joke

just download the SINGLE march security update that has been linked a thousand times already
>>
>>60351997
This twitter feed has never made me want to get a twitter account so much.
>>
>>60352646
Everyone says it's a different update which one is it for 7?
>>
>haven't updated since 2013
lol fags
>>
>>60352358
Time to make monie anon
>>
>>60352599
Congrats. You will update to windows 10.
A copy of windows 10 that still is unpatched, then you will have to update it all night.

Can you imagine that, even after that you wake up tomorrow just to find out that your computer was infected anyway?
>>
File: Capture.jpg (39KB, 651x482px) Image search: [Google]
Capture.jpg
39KB, 651x482px
>>60352673
this one
>>
>>60350465
this, too checking for updates every few minutes
>>
When did /g/ turn to shit?
When was it? It wasn't always this bad.

Shit like this does fuck all if you're behind a router.
There is no way to remotely fuck a computer behind even the shittiest isp provided firewall router.
The computer must run code that it's user has made happen, be it a drive by website, or an email.
Or the times the computer reaches out to somewhere must be intercepted mitm style.
>>
>>60350227
Why some countries are not affected?
>>
>>60352673
Shoot me your email, I'll send you a link.
>>
Which one is it for 2008 R2? Or is it unaffected?
>>
Just upgrade. you babies are insufferable.
>>
File: 1481877451145.png (2MB, 1214x1109px) Image search: [Google]
1481877451145.png
2MB, 1214x1109px
>>60352705
>Windows users have to install windows 10 botnet components to get security updates
>>
>>60350405
Windows is for normie scum.
>>
>>60350543
dale pajeraso
imbecik
>>
I walked into work this morning, and all of our computers were hit. I'm literally shaking right now. Years of work flushed down the toilet.
>>
>>60352724
Because they have no internet.
>>
>>60352829
Like Finland?
>>
I don't live alone and the other two are still on Windows 8.1 and 10. Can that shit hurt me if I'm running Linux?
>>
>>60350227
>proprietary malaware
Would not install.
>>
>>60350227
What's even the point of making a virus? Just to destroy other people's computer software? Sounds like warfare if you ask me.
>>
What's with that one place in Canada getting destroyed?
>>
>>60352723
What I thought at first too. Someone must bu stupid on your network to get vulnerable computers affected...
>>
File: 1469402261103.png (12KB, 500x500px) Image search: [Google]
1469402261103.png
12KB, 500x500px
>>60352880
There are a lot of people dumb enough to pay
Here in Germany/Austria there was a virus that pretended that the police locked your PC and you had to pay a fine to unlock it. I know a guy who paid even twice with the hope unlocking in the 2nd time.
>>
>>60352891

looks like toronto
>>
File: 1478781922258.gif (496KB, 500x455px) Image search: [Google]
1478781922258.gif
496KB, 500x455px
>>60352880
>he doesn't use military grade antivirus
>>
So should I buy some bitcoins?
>>
>>60350980
>"[The] infection vector is unknown but suspect internet facing machines are spreading infections exploiting a Samba vulnerability
>internet facing machines
You know what this means? Servers.

Thanks to moving past dial up Internet the vast majority of [Windows] computers are no longer Internet facing, the modem/router is the Internet facing component.
Unless they DMZ or port forward to allow the Samba vulnerability to become Internet facing they won't be exploited remotely, which leaves servers that aren't being updated to patch such exploits.
>>
>>60352923
Buy a brain instead.
>>
>>60352923
I would before they all run out.
>>
>>60352821
years of work with no backups?

your sysadmin is retaredd
>>
File: last update.png (101KB, 1001x601px) Image search: [Google]
last update.png
101KB, 1001x601px
Aw jeez.
>>
>>60350543
Jajajajajaja posta? qué saladazo
>>
>>60352919
So they basically hold your computer for ransom? Is that why it's called ransomware? Can't the police trace it back to the banking or money transfer account the hacker is using?
>>
>>60352966
Mooods the niggers are trying to be white again
>>
>>60352976
Lrn2 buttcoin.
>>
>>60352976
not really, because they ask for bitcoins and tracing those is pretty tricky even for da police
>>
>>60352921
Are you in the military or something?
>>
File: devil_frog.jpg (54KB, 540x618px) Image search: [Google]
devil_frog.jpg
54KB, 540x618px
>>60352599
Enjoy your bloatware!
>>
>>60352976
Yeah. I wonder why hackers dont use normal bank accounts. Bitcoinwallets are so lame xD
>>
Spooked
>>
>>60352111
Russian hackers will always be more blamed than the NSA.
Fuck the fact that SMB1 (CIFS essentially) has been insecure since 2000. No way it took 17 years for some SUPER LEET HACKARS at the fucking NSA to prove that SMB1 was easily exploited.

>>60352211
https://technet.microsoft.com/en-us/library/security/ms17-010.aspx
Mind you, this bulletin is 2 months old.

>powershell
Get-WmiObject Win32_Quickfixengineering | Where-Object {$_.Description -eq "Security Update"} | Sort InstalledOn

If the latest KB is from before march, you're vulnerable.

>>60352750
Any system with SMB1 and with no patch since march is affected. Pointing here >>60351997

>>60352724
Because SMB is usually not exposed to the internet unless you're a fucking moron with computers. The dots on this worldmap are where admins fucked up.
>>
>>60351037
Install these and you should be fine:

KB2952664
KB2990214
KB3021917
KB3022345
KB3035583
KB3068708
KB3075249
KB308014


or google it. I would google it.
>>
>>60352988
They'd have to infect someone who uses bitcoin though, right?
>>
>>60352981
No one's trying to be anything baby girl. It's just fun replying in Spanish here
>>
>>60352921
>military grade antivirus

Massively overpriced, locked into a single vendor and ten years behind schedule?
>>
>>60353017
The virus explains how to purchase and send bitcoins
It even has a "contact us" option, how nice
>>
>>60353017
No,man, you can buy bitcoins all over the place now. Read up on bitcoin transactions. Old ladies and shit have paid to have their computers unlocked in other ransomeware attacks. You live under a rock, or something?
>>
>>60351037
Does installing any of these get you the fucking forced w10 spyware telemetry stuff?

Goddammnit
>>
>https://technet.microsoft.com/en-us/library/security/ms17-010.aspx

>no windows 8 update
Am I fucked, guys?
>>
>>60353017
The virus comes with a guide to setting up a Bitcoin wallet. Even has language options. It's pretty good software tbqh.
>>
We must stay vigilant.
>>
File: FB_IMG_1480837254867.jpg (60KB, 480x720px) Image search: [Google]
FB_IMG_1480837254867.jpg
60KB, 480x720px
>>60350329
>>
"KB2670838 (The EVIL Update, breaks AERO on Windows 7 and makes some fonts on websites fuzzy, Windows 7 specific update only, do not install IE10 or 11 otherwise it will be bundled with them, IE9 is the max version you should install)"

I uninstalled this and wtf W7 feels faster
>>
>>60353066
I don't keep up with computer technology in fear of being hacked or spied on, I'm more of an /x/ and /pol/ guy. I learn as I go, getting back into technology, I wanted to distinguish between the material and spiritual before getting back into tech. You wouldn't believe the evil shit the CIA does.
>>
How long until Microsoft breaks out the forced updates to shut this shit down?
>>
File: 1492425020494.jpg (602KB, 3504x2336px) Image search: [Google]
1492425020494.jpg
602KB, 3504x2336px
>>60350227
>>
Can you get infected if you're on W10?
>>
>>60350329
you forgot to mention that windows update is extremely slow, especially on windows 7
>>
I haven't updated in over a year, I hope I get the ransomware. It would make me feel part of something.
>>
So how do i protect myself? I've set up win7 updates for searching a new ones, but it takes a lot of time. For now, i have installed comodo. What else do i need to do?
>>
>>60353189
Does the ransomware hacker send the victim a code to unlock their computer or something? How do yhey send it?
>>
>Africa immune

we must steal their technology
>>
How likely is it that the person(s) behind this will be caught?
>>
>>60353172

He's always right.
>>
>>60353239
Those some high-tech pigeons.
>>
>>60353165
These guys are such retards though

>it's important to your business that your users stay up to date
>make the process so annoying most of your users go out of their way to turn it off
>can't figure out a way to make it less annoying so that people will leave it alone
>consider making it a mandatory pain in the ass because your whole company is retarded
pathetic, truly worthy of a company ran by poos-in-loos
>>
>>60353253
No idea but they must be shitting themselves right now because there is absolutely no way they thought it was going to spread this much/fast.
>>
>>60353157
>You wouldn't believe the evil shit the CIA does.
Oh, yes, I would. That's why you need to stay on top of things. Like others have said in this thread, people should have treated this situation like it were life or death the minute it was announced. This was a major weapon handed to hackers.
>>
File: BillGatesonPhone2.jpg (19KB, 140x140px) Image search: [Google]
BillGatesonPhone2.jpg
19KB, 140x140px
>>60350227
>"Activate the hardware backdoor"
>>
>>60353233
It infects your system32 folder, if you delete that the virus won't install and your safe.
>>
>>60353236
>Does the ransomware hacker send the victim a code to unlock their computer or something?
Some do. Some don't. Some have even given in to sob stories.
>>
So, how exactly does this shit spread?

I haven't updated my windows 8.1 for years now.

Am I already at risk while being on the web?
>>
>>60353277
Can't you set Windows Update to take place during early morning? 2 AM and the like.
>>
File: 14946160765790.png (235KB, 1366x768px) Image search: [Google]
14946160765790.png
235KB, 1366x768px
Kek russian Ministry of Internal Affairs got malwared haaaaa
>>
File: 1262169319519.jpg (31KB, 604x453px) Image search: [Google]
1262169319519.jpg
31KB, 604x453px
>bitcoin address used to order Dominos pizza to a private address week before the attacks
>>
File: 1494436342124.jpg (76KB, 600x722px) Image search: [Google]
1494436342124.jpg
76KB, 600x722px
>>60353284
https://youtu.be/CDA0V-HWsYc
https://youtu.be/XGSWEOZRTh4
>>
>>60350529
> pro user
> Windows
>>
Why would the NSA knowingly kill people like this? Has Microsoft been helping the US government all along?
>>
>>60353332
Sure but at some point it asks you to reboot, then when you reboot it holds shit up
>>
>>60350227
I got that ransomware shitware today. I reply that I'm nigerian banker and that I'll give them 11mil$.
Win xp user here.
>>
>>60353351
really?
>>
>>60350227
t. cia/nsa niggers
>>
>>60353332
You can, but sometimes windows arbitrarily decides to ignore the schedule, or outright reset it
>>
>>60353379
I think it reboots automatically as well. Either way it should have this option.
>>
>>60352358
Charge them $299 dollars to fix it.
>>
>>60353342
Russian ministry using American software

Fuccccccken retards
>>
>>60353342
any chance of source?
>>
>>60353271
for real
>>
File: 1456630877534.png (2MB, 1065x902px) Image search: [Google]
1456630877534.png
2MB, 1065x902px
>its a british old people get killed by ransomeware episode
>>
>>60353404
>$299
>Not $299.50
God bless your noble heart, anon.
>>
>>60350227
>WE HAVE THE BIGGEST WORM SINCE MS08-067

Man, conficker was a total fucking bitch back in 2008, considering how many more machines are connected to the internet/clusters I can't imagine how much this must suck
>>
One of the biggest problems with Windows is the inability to return to state when it restarts from an update.

I am aware that it might not always be possible, especially with large updates like feature updates, but if they could make it so that all the user applications open effectively hibernate when it goes to do a update restart and are restored on login then it would go a long way toward people not caring about automatic updates.

Then there's that full screen focus stealing updates available notification which opens Windows Update when closed. There's already a notification system available guys. Use it.
>>
>the eternal black dick has taken on electronic format

HACKED.COM
>>
File: 1281288052010.jpg (41KB, 481x354px) Image search: [Google]
1281288052010.jpg
41KB, 481x354px
>Checking for updates...

God damn this shit takes forever. How long could it possibly take to CHECK for patches?
>>
>>60353013
>or google it. I would google it.

Funny guy.
These are all old, superceded patches or botnet "telemetry" patches.

>>60353017
No. The scheme works because they make the process of paying with bitcoin as smooth as possible, ie. using exchange services. The "better" the "customer experience", the more chance of them getting their money.

>>60353083
https://support.microsoft.com/en-us/lifecycle/search?alpha=windows%208
>1/12/2016
>Customers have 24 months to move to Windows 8.1 after General Availability in order to remain supported. See the Windows 8.1 FAQ for more information.

>HAHAHAHAHAHA YES
No. Disable SMB1, mitigates this exploit. Read >>60351997
>>
>>60353466
Saved. It's poetry.
>>
>>60353394
TempleOS
no internet, no virus

Why don't you heathens believe in the holy word already?
>>
>>60353480
It's a bug. Go fix it.
>>
>>60353480
Same here, just install the one you need manually
>>
File: 1484058389424.gif (831KB, 225x144px) Image search: [Google]
1484058389424.gif
831KB, 225x144px
>>60353480
Windows Update needs an update to update properly nowadays, but since the update to update Windows Update comes through Windows Update it can't update itself.
>>
>>60353480
You run Windows 7.
You have a few hundred patches that all need to be enumerated.
Make sure the newest Windows Update Agent is installed.

https://support.microsoft.com/en-us/help/949104/how-to-update-the-windows-update-agent-to-the-latest-version

>>60353530
Exactly. Which is why you update the Windows Update Agent offline BEFORE contacting MS with your old agent.
>>
>>60353480
They used a really bad algorithm for checking updates, where they would check the dependencies of each update, and then the dependencies of those, etc. you get the picture. They have an update to fix that, but you need to install it manually, just google it.
>>
>>60353480

Fix slow updating:
> [1] Installing and searching for updates is slow and high CPU usage occurs in Windows 7 and Windows Server 2008 R2
https://support.microsoft.com/en-us/kb/3102810

> [2] How to update the Windows Update Agent to the latest version
https://support.microsoft.com/en-us/kb/949104

> [3] April 2015 servicing stack update for Windows 7 and Windows Server 2008 R2
https://support.microsoft.com/en-us/kb/3020369

> [4] July 2016 update rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1
https://support.microsoft.com/en-us/kb/3172605

> Avoid:
KB2952664
KB3021917
KB3068708
KB3080149
KB3184143
KB971033
>>
>still using win8 (no, not 8.1, just 8) on ever slowly dying asus laptop
Welp, nice know you /g/.
>>
quick rundown please

who's gonna pay for this
>>
>>60353561
8.1 actually. Found the fix though.
>>
>>60353614
>implying the data won't be deleted even with payment
>>
Institutions that deal with life and death have Internet-facing computers running Windows XP.
>>
>>60353634
Government agencies storing all your personal data run on windows xp. Welcome to the botnet.
>>
File: 1385579916354.jpg (67KB, 426x341px) Image search: [Google]
1385579916354.jpg
67KB, 426x341px
>reading a related article
>sudden a popup
>it was just a subscription ad
Even the flicker from the display driver gave me a spook.
>>
File: 1486306292237.jpg (52KB, 550x328px) Image search: [Google]
1486306292237.jpg
52KB, 550x328px
>mfw dancing cringe worthy in my mother's basement to the suffering of winsuckers


https://www.youtube.com/watch?v=2snPAX05RwA
>>
>>60353530
Windows Update updates itself before searching for updates. It isn't delivered as an update.

That's part of the problem, another part of the problem is often Windows Defender working hard to scan everything that Windows Update is working with which slows WIndows Update down.

Another part is just how Windows Update goes about searching for updates. You think it would just have an index list of updates installed and download a list of updates from the server then compare, but it must go through verifying all the currently installed updates as well which takes a fuck load of time.
>>
This is a false flag created by Microsoft meant to get people to upgrade to windows 10.
>>
>bitcoin prices about to surge after Winbabbies increase demand
thanks NSA
>>
>>60353634
>>60353652
Windows XP doesn't have this one issue.
Windows XP is still getting security updates.
>>
>>60351587
We noticed, avatarfag, now read the Vietnamese horseracing forum rules.
>>
>>60353665
this tbqhsenfampai
>>
>>60353679
Hospitals confirmed running XP after their extended service contract with MS ended. There are no security updates for most of these computers.
>>
>>60351595
Edgy redditor summerfag detected
>>
>>60353454
Conficker is the only one of these memeworms I ever got. I was still on dialup at the time.
>>
>>60353660
https://youtu.be/j84Z_4IPbHk
>>
>>60353723
thanks mate
>>
XP SP2 here. What should I do? How does that thing infect and what do I have to do to prevent it?
>>
my win 8.1 pc shits itself and starts flashing whenever I try to update it and I always end up having to do a system restore. What the fuck is wrong with this piece of shit
>>
File: 1494538899937[1].jpg (133KB, 1080x1080px) Image search: [Google]
1494538899937[1].jpg
133KB, 1080x1080px
all bitcoin addresses used so far

https://pastebin.com/MSUqVahp
>>
doesn't disabling smb1 and blocking 445 fix this?
or is there more to it than eternalblue
>>
>>60353766
>windows
there's your problem

upgrade to pure linux
>>
>>60350227
>WINKEKS ETERNALLY BTFO
Unless you have windows update turned on and set to automatic updates, which is the default.

If it blows out anybody, it's the special snowflakes who have it turned off or have delayed it for months at a time. This is what you deserve.
>>
>>60351953
How can you prove a negative?
>>
Who will be the first security service to find the Spanish scriptkiddie?
>>
>>60353765
sp3 + posready 2009 patches

Everything seems fine
>>
>>60353708
They can use pos registry trick to get updates.
>>
>>60350405
They do, you just have to manually download them from the online update catalog.
>>
>>60353823
>and set to automatic updates
Or if you have updated manually within the past two months.
>>
>>60352981
STFU and eat from your bowl of lard, stupid cunt.
>>
>>60353342
>>60353420
http://varlamov.ru/2370148.html

>>60353375
Microsoft has been neglecting SMB1 since 2006 with the release of Vista.
Retarded printers scanning to SMB shares with SMB1.
Companies rely on said printers and other junk.
SMB1 is therefore crucial to their infrastructure and is not turned off on their file shares. MS can therefore not turn off SMB1 for newer versions of Windows.

>>60353634
Oh, SMB1 is present on your Windows 10 machine, boy. If you havn't updated since February, you can get pwned by this exploit too.

>>60353657
Have an adblocker, don't browse dodgy sites, don't click on links in emails. Disable SMB1 in control panel.
You are now safe.

>>60353679
Not the one fixed in MS17-010. Another one exists for XP which is, of course, unpatched for 99% of the world who does not have $500 million. https://github.com/misterch0c/shadowbroker

>>60353765
>What should I do?
Nothing much. Turn on your firewall and block TCP 445 in and out. Hope for the best.
>How does that thing infect and what do I have to do to prevent it?
It uses poisonous SMB messages to execute code on remote systems. If you have your firewall turned on and you're behind NAT, you're safe. Of course, that's the infosec part of it. Screw up your opsec by clicking links in emails and nothing will save you.
>>
>>60352417
You can still do the free upgrade
>>
>>60354035
>Microsoft has been neglecting SMB1 since 2006 with the release of Vista.
why didn't they keep bolting on features like they usually do with everything else?
>>
>>60354035
>Disable SMB1 in control panel.
I have win 7 and there is nothing like that in control panel. Wat do?
>>
>>60354122
You didn't even entertain the idea of trying google before whinging about it here, did you
>>
>>60354122

Despair. Possibly loss.
>>
Let me get this straight:
>Microsoft rolls out updates that nags the user with "get Windows 10" pop-ups
>users get annoyed and disable updates
>NSA/CIA developed 0day gets leaked, effects computers Windows
>skid creates ransomware using those 0days
>ransomware spreads extremely fast
>users, businesses, and government networks get hit
>Microsoft's reputation of Windows being insecure as shit continues

is this true?
>>
>>60354035
Extreme computer illiterate here, i opened the powershell as admninistrator and copypasted this command:

>Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" SMB1 -Type DWORD -Value 0 -Force

After that i hit enter but no message showed up afterwards, is that how it works?
>>
>>60354262
it changes the registry, you can go check it yourself
go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Paramters
find SMB1 and it should be 0

also, do the SMB client disable as well

sc.exe config lanmanworkstation depend= bowser/mrxsmb20/nsi
sc.exe config mrxsmb10 start= disabled
>>
>>60354122
Apologies, did not check if the same checkmark exists in Windows 7.
Found another article for you: https://support.microsoft.com/en-us/help/2696547/how-to-enable-and-disable-smbv1,-smbv2,-and-smbv3-in-windows-vista,-windows-server-2008,-windows-7,-windows-server-2008-r2,-windows-8,-and-windows-server-2012

>To disable SMBv1 on the SMB server, run the following cmdlet:
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" SMB1 -Type DWORD -Value 0 -Force -Verbose


>>60354247
Yep, sounds like /g/.
The rest of the world are secure, though.

>>60354262
>After that i hit enter but no message showed up afterwards, is that how it works?
yep. errors only pop if it didn't work and status messages are only shown if you put -Verbose at the end.
>>
>>60354421
Another good article
https://www.rootusers.com/disable-smb-version-1-0-windows-10/
>>
>>60354421
Thank you very much, anon. I asked you directly because youre smart and trying to help!

I just checked that registry path and i dont have a registry entry: SMB1

I have a heavily modified services. Can it be that i uninstalled/disabled this already so it doesnt appear in registry?
>>
>>60352481
Free forever and here is the best part: it's still free. Just download that tool from their website, the one that lets you create a USB installation of windows 10 and install through that, that's it.
>>
If I get this virus and just restore from a restore point I made last week will I be ok?
>>
>>60354247
It's not a zero day, everything else is probably true. Which makes all this even more pathetic.
>>
>>60354379
>it changes the registry, you can go check it yourself
I tried editing the registry first but i saw there was no smb1 in there, and now there is one, so i guess it worked, thanks.

>also, do the SMB client disable as well
So i just need to copy paste those comands into the powershell and they will work? Sorry if i sound stupid.

Windows7 user by the way, if that changes anything.

>>60354421
Thanks, my biggest mistake in life was not doing a computer related major in college. I will start learning soon.
>>
>>60354658
open cmd as admin and copy them
I don't know if it's needed since this seems to be a server exploit, but fuck it, you don't need that deprecated piece of shit anyways
>>
>>60354497
Just tested on a Windows 7 machine, it worked.
Make sure you open Powershell as administrator.

>>60354595
Oh hell yeah nigga it's a zero day. Who knows how long NSA has held onto this.
True, every piece of malware using this exploit after march are no zero days, but NSA has surely used this before it got patched.

>>60354658
yeah just paste those into an administrator prompt (powershell or cmd) and you're good to go.

>>60354700
It's part of the vulnerability, so the client configuration should also be disabled. Prevents the peer-to-peer spreading.
>>
>>60353417
They really do that? Someone could take down networks of government computer and establish a militia rule.
>>
>>60353679
I know poluce car laptops use Windows Vista where I live, the county sheriff.
>>
>>60354796
>Just tested on a Windows 7 machine, it worked.
Make sure you open Powershell as administrator.
So this command is supposed to create a registry entry for SMB1 and set it to 0 if i dont have it already? Did you had that registry entry prior running the command?
>>
>>60354864
Police*
>>
>>60354700
>>60354796
Used cmd, Recieved after aplying each of both commands

[SC] ChangeServiceConfig ÊXITO

(EXITO=Success in portuguese)

So i guess it worked, thanks to both of you, could i apply the same method to othe family computers? All of them are illiterates as well using W7, so i would feel bad if anyone lost anything during this.
>>
>>60352278
This has been happening to my gf's laptop since March, what the fuck am I supposed to do now?
>>
>>60355033
Do a fresh install
>>
>>60354891
I checked, and I did not.
But if the command doesn't work, you can create your own registry entry

>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters
Create new DWORD
Name: SMB1
Value: 0

>>60354962
>could i apply the same method to othe family computers?
Yes, nothing should be lost for home PCs. The functionality that we disable is only used in enterprises with old equipment.
>>
>>60354962
yes, I just did it to all my PCs
also if you want you can block port 445 in firewall
>open firewall with advanced security
>right click inbound rules
>select port
>445
>TCP
>block
do the same for UDP and outbound rules
>>
>>60354379
Do i use one and then second? Or do i put both of them and then ENTER?
>>
>>60355155
one by one, they're separate commands
>>
>>60355111
Should I leave port 445 closed, is it used for something?
>>
File: 1438756878.jpg (67KB, 745x559px) Image search: [Google]
1438756878.jpg
67KB, 745x559px
>>60350227
WINDOWS FAGGOTS ROASTED!

BEST TIMELINE!!!!
>>
File: 1468515069088.jpg (91KB, 1080x1443px) Image search: [Google]
1468515069088.jpg
91KB, 1080x1443px
>>60353591
>Fix slow updating:
>https://support.microsoft.com/en-us/kb/3102810

http://forums.pixeltailgames.com/t/windows-7-8-windows-updates-to-avoid-telemetry/9977
>KB3102810 (Fixes an issue regarding long wait while searching for Windows Updates but also has Windows 10 Upgrade preparation for Windows 7)
Welp
>>
>>60355230
it's used by SMB, I don't know if only the old version uses it or the new ones as well
I'm guessing that only thing that it could affect is filesharing on the same network, if you use that
>>
>>60353595
Meanwhile I'm still using Mac OS X 10.8 and performs like new on a 2011 MBP connected to a monitor with a much lower chance of threat

Good feel
>>
G-guys do i need to run "smb server" disable command or just "smb client" one? Is there any potential harm in adding that new registry entry?
>>
>>60355621
just do both nigger, that's the fucking point of the exploit

>server lets other machines connect to you
>client lets the machine connect to other machine running a server
>>
>>60355660
Should i use power shell or add it manually through regedit? cmd wont work, right? Thank you for the help and patience...
>>
>>60355730
anon, just read

>Windows PowerShell 2.0 or a later version of PowerShell
To disable SMBv1 on the SMB server, run the following cmdlet:
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" SMB1 -Type DWORD -Value 0 -Force

As said above, this one is ran on powershell. Open powershell as admin.

>To disable SMBv1 on the SMB client, run the following commands:
sc.exe config lanmanworkstation depend= bowser/mrxsmb20/nsi

sc.exe config mrxsmb10 start= disabled

These 2 are separate commands, both ran on cmd. Open cmd as admin
>>
>>60355033
Install OpenBSD.
>>
>>60352630
Is that really her?
>>
>>60355811
Thank you! Everything worked. Now if i only could find how to block that port in TinyWall. Im happy to see we still have some helpful people like you on /g/! Id buy you a beer or something if i could.
>>
>>60350329
fake w update also an attack vector
>>
File: 1492052177538.jpg (843KB, 1920x1280px) Image search: [Google]
1492052177538.jpg
843KB, 1920x1280px
>>60356121
it is
>>
>>60356531
no need to mock my misunderstanding
>>
>>60356121
Yeah, Chloe Moretz found fit and got into SS + GOMAD
Thread posts: 371
Thread images: 63


[Boards: 3 / a / aco / adv / an / asp / b / bant / biz / c / can / cgl / ck / cm / co / cock / d / diy / e / fa / fap / fit / fitlit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mlpol / mo / mtv / mu / n / news / o / out / outsoc / p / po / pol / qa / qst / r / r9k / s / s4s / sci / soc / sp / spa / t / tg / toy / trash / trv / tv / u / v / vg / vint / vip / vp / vr / w / wg / wsg / wsr / x / y] [Search | Top | Home]

I'm aware that Imgur.com will stop allowing adult images since 15th of May. I'm taking actions to backup as much data as possible.
Read more on this topic here - https://archived.moe/talk/thread/1694/


If you need a post removed click on it's [Report] button and follow the instruction.
DMCA Content Takedown via dmca.com
All images are hosted on imgur.com.
If you like this website please support us by donating with Bitcoins at 16mKtbZiwW52BLkibtCr8jUg2KVUMTxVQ5
All trademarks and copyrights on this page are owned by their respective parties.
Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.
This is a 4chan archive - all of the content originated from that site.
This means that RandomArchive shows their content, archived.
If you need information for a Poster - contact them.