I am running an outdated Windows 7 and am not able to update it due to some reasons. I wanted to know how vulnerable is my Windows to WannaCry from the home wifi network connection. What would you recommend as an alternative solution to keep my Windows protected from it?
-
@nd510 I already have a paid AV - Bitdefender, but the thing is I am not sure whether I should connect to the internet for updating the virus definitions– Rochak GuptaJun 3, 2017 at 18:05
-
@messi It's not like wannacry is waiting there looking for vulnerable machines and infecting them the second they come online. It mostly spreads via emails. Just go online, update AV and you should be OK if you don't fall for some social engineering.– ShinobiUltraJun 3, 2017 at 18:50
2 Answers
WannaCry spreads using windows SMB. One should be able to disable this completely. However i recommend you to update your system. You wont win the hacking race against thousands of people alone...
Checklist:
Block external access to the smb port at the router (139, 445).
Disable smb if not necessary
https://blogs.technet.microsoft.com/filecab/2016/09/16/stop-using-smb1/
The usual anti- spam stuff
the usual mail/browser hardening
-
1
-
@SYS_V thanks for this ressource + edited to make it more clear... Jun 5, 2017 at 7:38
-
"WannaCry infected the first devices through emails" - please support this claim with evidence– julianJun 5, 2017 at 16:02
-
@SYS_V looks like this was a missinformation i had because it was published right after the big incident by many researchers. However it looks like no one of them can actually proove it. Im sorry for that... Jun 5, 2017 at 17:03
-
@SYS_V at least symantec does not know the first infection vector: symantec.com/connect/blogs/… Jun 5, 2017 at 17:07
Fix the 'some reasons'.
That is the simplest option... Unless the 'some reasons' are the use of a pirate version of the operating system, you should be able to get help with the issues that are preventing you from patching on SuperUser.
-
The reason is complications due to Dual Booting - I won't go into detail but it has rendered me helpless as of now, to install the patch or any other update. That's why I was looking for an alternative. Moreover, aren't systems connected to a home wifi safe until one is exposed to the malware via a suspicious attachment? Jun 3, 2017 at 18:10
-
1The answer remains the same though. Fix the problem that prevents you from patching. Jun 3, 2017 at 18:22
-
-
1So you can fix the problem, WannaCry is one of a huge number of potential threats which can be mitigated by patching... "I can't be bothered to maintain my system" seems like a poor reason for a downvote IMHO. Jun 3, 2017 at 20:48
-
1I am curious what sort of issue with dual booting can prevent updating Windows. I've had a few dual-boot systems (and use one still) and never had problems applying Windows security updates...if I'd have read of widespread issues with that before starting I wouldn't have started in the first place.– BenJun 5, 2017 at 20:26