In message , pjp
writes:
In article , says...


https://www.wsj.com/articles/microso...r-computer-bug
-in-a-week-of-them-11557900716

When I load the above page, my CPU usage takes off, whether in my old
Firefox or Chrome; the old Firefox locks up.



https://www.theverge.com/2019/5/14/1...ndows-xp-remot
e-desktop-services-worm-security-patches

_That_ one says it's in 7 as well.



https://blogs.technet.microsoft.com/...ent-a-worm-by-
updating-remote-desktop-services-cve-2019-0708

They don't half like to make you go round the houses to actually find
details of where to get the patch, don't they! That last one _implies_ -
though doesn't explicitly _state_, AFAICS - that for 7SP1 it's
_included_ in 4499164 "Monthly Rollup" and 4499175 "Security Only"
(superseding 4493472). (With other systems, such as Server 2008, having
their own.) [8 and 10 are claimed to be immune.]

You can search by KB number at
http://www.catalog.update.microsoft.com/Home.aspx; the results show
links which, on the left, tell you what's needed, what it supersedes,
_whether it has been superseded_, and other information, and on the
right link to the actual downloads. For 7-32 these might be
http://download.windowsupdate.com/d/... 97881d801.exe
and
http://download.windowsupdate.com/d/...89ab10bf41b.ms
u
; I'm not sure why there are two, but as the first one includes
"clearstalecache" in its name, I presume it does that. It's only 30K,
and seems to flash up a command window briefly. (I tried calling it from
a command window, and it just comes back to the prompt - no error
message, but no other message either.) The .msu file took about 5
minutes to run here, not counting the restart which it called for and I
haven't done yet.

I read some article about that which included the link to MS for the
patch. At the same time I let it connect to Windows Update. It only had
little over 200 updates for an XP laptop I seldom use. GEEZ!!!!

Had you not used it (or at least let it connect to WU) since before end
of support? (Had you implemented the POS hack?)

As (I think is becoming) usual, the patch installer
(TrustedInstaller.exe - an ironic name if I ever saw one!) is using
about 24-25% of my 4-core CPU, even _after_ it's got to the point where
it says it's completed, tells me it needs a restart, and I've told it
"not now". I don't know what it's doing. Ah - it has settled down, after
_another_ 7½ minutes or so. (Still shows as a running Image Name, but 00
CPU.)
--
J. P. Gilliver. UMRA: 1960/1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf

Who is Art, and why does life imitate him?