On my network I have to run two XP VM, because of legacy programs.

How can I mitigate MS17-010 on Windows XP? The machines are not directly exposed to internet, but they must be connected to the LAN.

Is enough to disable SMB server for avoid having my VM infected? I don't need a SMB server on the machine, but I need to access SMB clients from it.

  • 7
    See directly from Microsoft Customer Guidance for WannaCrypt attacks where they even provided patches for unsupported systems like Windows XP. May 13, 2017 at 9:29
  • "Is enough to disable SMB server for avoid having my VM infected? I don't need a SMB server on the machine..." In addition to some of the answers below, it's worth noting that it would be wise to disable any services that aren't explicitly needed. That's always a good move in my opinion.
    – user24601
    May 13, 2017 at 21:20

2 Answers 2


Microsoft released patches for all operating systems in custom support. Please see here.

For English language patches, direct links are Windows XP SP2 x64 and Windows XP SP3 x86. Localized version of the patch can be found here. Rest of the links can be found on the bottom of the blog post.

  • The linked blog post specifically states that Microsoft "made the decision to make the Security Update for platforms in custom support only (...) broadly available for download" (my emphasis). "Custom support only" is very different from "unsupported".
    – user
    May 13, 2017 at 17:56
  • @MichaelKjörling That is technically true but majority of users of these operating systems will not receive updates anymore. From their perspective they are de facto unsupported. I've edited the answer. May 14, 2017 at 20:20
  • I tried to install the localised update for Windows XP SP3 x86 (Greek) and it failed stating that the update language does not match the os language. What gives? I downloaded the update from the stated form and I also tried downloading from the Catalog Update site but same result.
    – gemantzu
    May 15, 2017 at 7:36
  • 1
    @h1k3n That's a very different question from what this is asking. You might try asking on Super User.
    – user
    May 15, 2017 at 9:50

There is a MS17-010 patch for Windows XP Embedded systems that fits the regular Windows XP. You can download it at the link below:


Google for the "POSready" string to learn how to install this Windows XP Embedded patch on a regular Windows XP.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .