AVG Network Inspector alert: Vulnerable to "WannaCry / DoublePulsar" attack

This article explains how to resolve the issue if Network Inspector in AVG AntiVirus shows the following alert:

• Vulnerable to "WannaCry / DoublePulsar" attack

Description

If you see the alert above after running a Network Inspector scan:

Your PC is at risk because it contains a well-known flaw called "EternalBlue", which potentially allows attackers to remotely connect to your PC and run malicious code.

The EternalBlue flaw makes you highly vulnerable to remote hijacking via a "DoublePulsar" attack. A DoublePulsar attack works by silently installing a dangerous backdoor implant on your PC, which attackers can use to bypass your PC's security and access your system without detection. After gaining access to your system, the attacker can plant malware, or steal your personal data. This means you are vulnerable to further malware attacks, including "WannaCry" ransomware.

For more information about this issue, refer to the Details section.

Solution

To remove the DoublePulsar backdoor from your PC and prevent further malware attacks, install the Microsoft Windows MS17-010 security update by following the exact instructions in the relevant section below.

Details

Your PC is vulnerable because it is running an outdated version of the Windows file-sharing service (SMB), which contains a serious flaw called "EternalBlue". On the affected PC, an attacker could run the specific code that installs the dangerous DoublePulsar backdoor implant.

Because the EternalBlue flaw is present on your system, you are vulnerable to further malware attacks. On May 12th 2017, the DoublePulsar backdoor in conjunction with EternalBlue was used by the "WannaCry" ransomware worm to infect thousands of PCs worldwide.

Follow the instructions in the Solution section to remove the EternalBlue flaw.

Further recommendations

All versions of AVG AntiVirus protect your PC against attacks that exploit the EternalBlue flaw, as long as the Enhanced Firewall feature is enabled. If AVG AntiVirus is not already installed on the affected PC, you can install AVG AntiVirus Free to ensure your continued protection.

For information about using Enhanced Firewall, refer to the following article:

• Enhanced Firewall - Getting Started