Microsoft Issues Fix for Bug in Malware Protection Engine

Question

Microsoft has issued an update to its core malware protection engine that fixes a bug that could allow an attacker to gain LocalSystem privileges on a vulnerable machine if a specific set of odd conditions exist.
The vulnerability in the Microsoft Malware Protection Engine is a privilege-escalation bug, so an attacker would already need to be authenticated on the local system in order to exploit it, the company said.
Continued here: https://threatpost.com/en_us/blogs/microsoft-issue​s-fix-bug-malware-protection-engine-022411
ThinkPad: T530 / X1 Gen 2 / Helix - Yoga: Tablet 2 Pro (Win) / Yoga 3 Pro
If you find a post helpful and it answers your question, please click the "Accept As Solution" button.
Lenovo Advocate ~ I am not employed by Lenovo or Microsoft. I am a volunteer.
Microsoft MVP - Consumer Security
SpywareHammer

Answer 1

You can export the management pack via powershell.  That will "unseal" the MP.  You can then go hack around in it and fix what you want, then reseal it.  The only issue is that you will have to Delete the one that is in your management group
before you import this hacked one and if there are any updates to this MP in the future, you will not be able to import the updated one without deleting the one you hacked.  Also, hacking a sealed mp and re importing it with your changes, might break
any support contracts you have with MSFT.
Regards, Blake Email: mengotto<at>hotmail.com Blog: http://discussitnow.wordpress.com/ If my response was helpful, please mark it as so, if it answered your question, then please also mark it accordingly. Thank you.