8

On my network I have to run two XP VM, because of legacy programs.

How can I mitigate MS17-010 on Windows XP? The machines are not directly exposed to internet, but they must be connected to the LAN.

Is enough to disable SMB server for avoid having my VM infected? I don't need a SMB server on the machine, but I need to access SMB clients from it.

| improve this question | |
  • 7
    See directly from Microsoft Customer Guidance for WannaCrypt attacks where they even provided patches for unsupported systems like Windows XP. – Steffen Ullrich May 13 '17 at 9:29
  • "Is enough to disable SMB server for avoid having my VM infected? I don't need a SMB server on the machine..." In addition to some of the answers below, it's worth noting that it would be wise to disable any services that aren't explicitly needed. That's always a good move in my opinion. – user24601 May 13 '17 at 21:20
10

Microsoft released patches for all operating systems in custom support. Please see here.

For English language patches, direct links are Windows XP SP2 x64 and Windows XP SP3 x86. Localized version of the patch can be found here. Rest of the links can be found on the bottom of the blog post.

| improve this answer | |
  • The linked blog post specifically states that Microsoft "made the decision to make the Security Update for platforms in custom support only (...) broadly available for download" (my emphasis). "Custom support only" is very different from "unsupported". – a CVn May 13 '17 at 17:56
  • @MichaelKjörling That is technically true but majority of users of these operating systems will not receive updates anymore. From their perspective they are de facto unsupported. I've edited the answer. – Marko Vodopija May 14 '17 at 20:20
  • I tried to install the localised update for Windows XP SP3 x86 (Greek) and it failed stating that the update language does not match the os language. What gives? I downloaded the update from the stated form and I also tried downloading from the Catalog Update site but same result. – gemantzu May 15 '17 at 7:36
  • 1
    @h1k3n That's a very different question from what this is asking. You might try asking on Super User. – a CVn May 15 '17 at 9:50
4

There is a MS17-010 patch for Windows XP Embedded systems that fits the regular Windows XP. You can download it at the link below:

http://catalog.update.microsoft.com/v7/site/search.aspx?q=4012598

Google for the "POSready" string to learn how to install this Windows XP Embedded patch on a regular Windows XP.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.