News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • Microsoft: Mumble mumble just ignore Windows Defender mumble mumble

    Home Forums AskWoody blog Microsoft: Mumble mumble just ignore Windows Defender mumble mumble

    Tagged: 

    Viewing 3 reply threads
    • Author
      Posts
      • #1875835 Reply
        woody
        Da Boss

        Remember the sfc /scannow stupidity – where scanning a perfectly good Windows installation triggered errors such as, “Windows Resource Protection foun
        [See the full post at: Microsoft: Mumble mumble just ignore Windows Defender mumble mumble]

        1 user thanked author for this post.
      • #1876071 Reply
        brw2019
        AskWoody Plus

        I’m wondering if the just-released Microsoft Security Advisory CVE-2019-1167 re. a PowerShell vulnerability may relate. I checked the version on my Windows 10 1809 machine which is up-to-date except the July updates and it shows version 5 which would be affected. Then the question is will Microsoft automatically provide the fix in one of the updates or do we have to manually upgrade to PowerShell 6? Here’s the Microsoft bulletin:

        https://github.com/PowerShell/PowerShell/security/advisories/GHSA-5frh-8cmj-gc59

        • #1876087 Reply
          jabeattyauditor
          AskWoody Lounger

          I’m wondering if the just-released Microsoft Security Advisory CVE-2019-1167 re. a PowerShell vulnerability may relate. I checked the version on my Windows 10 1809 machine which is up-to-date except the July updates and it shows version 5 which would be affected. Then the question is will Microsoft automatically provide the fix in one of the updates or do we have to manually upgrade to PowerShell 6? Here’s the Microsoft bulletin:

          https://github.com/PowerShell/PowerShell/security/advisories/GHSA-5frh-8cmj-gc59

          Did you manually install Powershell Core on your PC? (probably not)

          If not, you don’t need to worry about it being there & being vulnerable.

          Powershell <> Powershell Core

          1 user thanked author for this post.
          b
      • #1876458 Reply
        brw2019
        AskWoody Plus

        No I didn’t install. It comes preinstalled in Windows 10. I don’t automatically enable it & have changed the setting so it uses Command prompt instead. But the version is the vulnerable one according to the link I provided so my question still stands as to whether or not Microsoft will address this.

         

        • #1876528 Reply
          b
          AskWoody Plus

          It’s confusing but Powershell Core is not an edition that comes with Windows.

          PowerShell Core is a downloadable, cross-platform, open-source edition.

          See https://en.wikipedia.org/wiki/PowerShell for details.

          Like 99.999% of Windows users, you and I do not need to worry about this vulnerability.

          But Microsoft should do much better in clarifying this in the “Microsoft Security Advisory” to which you linked.

          Windows 10 Pro Version 2004: Group ASAP (chump/pioneer)

          1 user thanked author for this post.
      • #1876580 Reply
        brw2019
        AskWoody Plus

        Aha! Typical Microsoft doublespeak. Thanks much for clarifying.

         

    Viewing 3 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: Microsoft: Mumble mumble just ignore Windows Defender mumble mumble

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.