Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Meltdown and Spectre Powershell-Script Won't Run, Me Too!


  • Please log in to reply
5 replies to this topic

#1 pcpunk

pcpunk

  • Members
  • 5,773 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Florida
  • Local time:11:42 AM

Posted 05 January 2018 - 07:11 PM

Hey guys, and thanks for the help in advance!  Rather than hijack another's thread I will wreak my havoc here.

 

From what I just read (Thanks to Didier Stevens) I see that I have an older version of PowerShell, and that this Script won't work.  Here is my outcome.  I will go try to find the info on Updating Powershell, and then try the script again.  Any advice on that would be nice, if there is anything to avoid etc.  Hopefully this will also help others with this issue.

Windows PowerShell
Copyright (C) 2009 Microsoft Corporation. All rights reserved.

PS C:\Windows\system32> Install-Module SpeculationControl
The term 'Install-Module' is not recognized as the name of a cmdlet, function, script file, or operable program. Check
the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:15
+ Install-Module <<<<  SpeculationControl
    + CategoryInfo          : ObjectNotFound: (Install-Module:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException

PS C:\Windows\system32> get-host|Select-Object version

Version
-------
2.0


PS C:\Windows\system32>

I am a little confused about what this Script does?  Is it that not all CPU's are vulnerable?  My CPU does not have a current firmware update so it may be vulnerable at this time (though not to worried about it ATM) I have time to work on it now, so I'll try to move forward.  I'm hoping Dell and Intel will get the firmware update if needed on my cpu and will be watching for it.

 

Thanks, pcpunk


sBCcBvM.png

Created by Mike_Walsh

 

KDE, Ruler of all Distro's

eps2.4_m4ster-s1ave.aes_pcpunk_leavemehere

 


BC AdBot (Login to Remove)

 


#2 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,685 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:05:42 PM

Posted 05 January 2018 - 07:16 PM

You need to install the Windows Management Framework to update PowerShell.

Take a look at the table here to see which version is compatible with your Windows version:

 

https://docs.microsoft.com/en-us/powershell/wmf/readme


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Senior Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2019
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#3 pcpunk

pcpunk
  • Topic Starter

  • Members
  • 5,773 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Florida
  • Local time:11:42 AM

Posted 05 January 2018 - 08:45 PM

Thanks Didier will do!


sBCcBvM.png

Created by Mike_Walsh

 

KDE, Ruler of all Distro's

eps2.4_m4ster-s1ave.aes_pcpunk_leavemehere

 


#4 rp88

rp88

  • Members
  • 3,002 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:03:42 PM

Posted 07 January 2018 - 03:44 PM

I keep getting this too. Is running the powershell script actually needed or is installing the windows updates enough? Oddly enough the update still hasn't been offered to me, so I've downloaded it from ms's update catalog website. I'm fine from an antivirus perspective, avast has already set the "I can cope with the windows update that prevents meltdown/spectre" registry key, but I wonder f there might be other compatibility problems which mean I haven't been offered the update yet? Has anyone had bugs with the x64 edition of the Windows 8.1 update KB4056898, and if it does mess up any programs is it like any normal update and reversible just by uninstalling?
Back on this site, for a while anyway, been so busy the last year.

My systems:2 laptops, intel i3 processors, windows 8.1 installed on the hard-drive and linux mint 17.3 MATE installed to USB

#5 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,685 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:05:42 PM

Posted 08 January 2018 - 02:38 PM

No, you don't need to run this PowerShell script.

 

What you need to do, is install the patches and update your firmware.


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Senior Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2019
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#6 pcpunk

pcpunk
  • Topic Starter

  • Members
  • 5,773 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Florida
  • Local time:11:42 AM

Posted 08 January 2018 - 05:40 PM

You need to install the Windows Management Framework to update PowerShell.

Take a look at the table here to see which version is compatible with your Windows version:

 

https://docs.microsoft.com/en-us/powershell/wmf/readme

On my other work machine, Windows 8.1

 

Just downloaded WMF 5.1 because this machine is Windows 8.1. Now need to install .NET Framework.

 

As far as I can tell it's fine for me to Install 4.7.1 NET Framework 4.7.1 Dev Pack on my Windows 8.1 Machine.  Should I bother, or go with an earlier version not labeled as "Dev", like the 4.6?

https://docs.microsoft.com/en-us/dotnet/framework/install/guide-for-developers

 

Also, I don't see any Firmware Updates at the site for this pc.

https://support.hp.com/us-en/drivers/selfservice/hp-pavilion-g7-2200-notebook-pc-series/5296086/model/5317028

 

Thanks Didier


Edited by pcpunk, 08 January 2018 - 05:42 PM.

sBCcBvM.png

Created by Mike_Walsh

 

KDE, Ruler of all Distro's

eps2.4_m4ster-s1ave.aes_pcpunk_leavemehere

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users