4 ms·
There is a chance that the machines affected were already compromised by malware which altered the way Windows Update was working.
by JohnTHaller 11y ago
There is a chance that the machines affected were already compromised by malware which altered the way Windows Update was working.
- RIMR 11y agoWouldn't that malware just download and install payloads itself rather than piggybacking off of Windows update? It would need root access to manipulate Windows Update in this way, but with root access it wouldn't need Windows Update to install packages.
- JohnTHaller 11y agoIt would allow the malware to get around any software firewalls.
- RIMR 11y agoWhich it would already have control of with root access.
- JohnTHaller 11y agoIt would, but it would need to deal with the whole plethora of software firewall to ensure it doesn't trip them but doesn't break them in a way noticeable by the user. Piggybacking on Windows Update accomplishes both because every software firewall has Windows Update whitelisted out of the box.
- angelbob 11y agoSeveral of the forum comments mention fresh installs. So possible, but fairly unlikely.
- JohnTHaller 11y agoFresh installs from what media though? "Pre-activated" Windows ISOs are freely available on any torrent search site with who-knows-what added.
- doubt_me 11y agoThat is a main issue with people who don't know how to look for the right ones. But I get my images by matching the MSDN MD5 hashes (I am not on 10 yet, even though digital river is gone the MSDN images are still out there) /this forum is a god send http://forums.mydigitallife.info/index.php http://forums.mydigitallife.info/index.php
- draw_down 11y agoAgreed, and there are so many possible explanations that jumping to "Windows Update was compromised" is just silly.