Impact of WannaCry and Petya Ransomware on Leica Biosystems CytoVision, Aperio, Ariol scanners and software

Transcription

1 June, 2017 Impact of WannaCry and Petya Ransomware on Leica Biosystems CytoVision, Aperio, Ariol scanners and software Since Friday May 12, 2017 major cyber-attacks known as ransomware have been infecting computers in more than 150 countries due to a vulnerability in various Microsoft Windows operating systems. Infection of a computer system can happen in three ways: (1) by visiting a malicious homepage, downloading a zip file, and executing the content. (2) by receiving an with the above-mentioned zip file attached, and executing the content. (3) via network, utilizing a vulnerability in the SMB protocol (port 445, 137,138 and 139). Microsoft has released a security update MS to fix the problem with SMB protocol. Leica Biosystems has been investigating the effect this patch has on installed application software in order to evaluate if this patch should be applied to existing systems and incorporated in future updates of the operating systems.

2 We have completed testing across our Aperio, Ariol, and CytoVision product lines with the following recommendations: - Aperio scanners (AT2, AT Turbo, CS2, LV1, FL, OS, CS-O, XT) currently running Windows 8.1, Windows 7 and Windows XP: o It has been confirmed for all systems that the Microsoft security update will not impact scanner functionality. o Existing customers can use the attached instructions to update their systems. o All new systems are being produced with this Microsoft patch applied (except for new Aperio LV1 scanners). Customers will need to apply the software patch at the time of installation using the attached instructions. - Aperio software (Aperio eslide Manager, version 12.0 and higher) and associated servers currently running Windows Server 2008 R2, and Server 2012: o It has been confirmed for all software versions 12.x have been confirmed that the Microsoft security update will not impact functionality or performance. o Existing customers can use the attached instructions to update their systems. o All new servers purchased from Leica Biosystems will be installed with this Microsoft patch. Customers using their own servers to host Aperio software can apply the security update as directed by their information technology organization or use the attached instructions. - Aperio VERSA (all versions), CytoVision (7.x) and Ariol (3.x, 4.0) currently running Windows 7, Leica Biosystems SCN400 scanners, SlidePath Digital Image Hub and Digital Slide Box (all versions): o All systems ship and software is installed with Microsoft Automatic Updates enabled, and should be updated with the latest Microsoft patch. Customers should verify that Windows Updates have not been disabled. It is highly recommended that you maintain regular backups of your computer systems, regardless of which Leica Biosystems product you are using. Should additional product specific information relative to this cyber threat become available, updates will be shared on this site and through your local service teams. If you have already applied the Microsoft security update, please contact us if you have any issues with your scanner or software. If you should have any questions or need further information, please contact your regional Technical Support team at LeicaBiosystems.com/contact-us/contact-us-online (please specify the country). For further information on the Ransomware cyber-attacks please consult with your local IT team or the Microsoft Support website.

3 RansomWare Patch Instructions for Aperio Scanners and Software (LeicaBiosystems.com/RansomWare) Ransomware Patch Instructions for Aperio Scanners (Windows 7 & Windows 8.1), and Aperio Software (Windows 7, Windows Server 2008 R2, & Windows Server 2012 R2) Applying Microsoft Security Patch to Aperio Scanners and Software: Step 1: Enable Windows Update Service: - Type Services into the search bar at the bottom of the start menu - Click on Services to launch Windows Service Manager

4 - Navigate to Windows Update in the list of services - Right click on Windows Update service and select properties:

5 - - Navigate to Startup Type and select Manual from the drop-down menu. Click OK Step 2: Downloading Microsoft Security Patch: - Launch web browser and navigate to the following URL:

6 - Search for the KB # associated with the Operating System of the system running your Aperio Scanner and/or Software: o Windows 7 and Windows Server 2008 R o Windows 8.1 and Windows Server 2012 R Click the download link for the specific Window Operating System you are using: o Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB ) o Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB ) o o Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems (KB ) Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB ) - Follow the download and installation instructions, including installation of any prerequisite updates that may be required. - Once installation is completed, Do Not Restart your Operating System; When prompted to restart click Close

7 Step 3: Disable Windows Update Service: - Return to the Windows Service Manager and Navigate to Windows Update in the list of services

8 - Right Click on Windows Update service and select properties: - Navigate to Startup Type and select Disabled from the drop-down menu. Click OK Step 4: Restart Windows to complete Installation of Patch - Restart the Windows and wait for Windows Updates to complete installation of security patch. Applying Microsoft Security Patch to Aperio Scanners running Win XP 32bit SP3 OS. Step 1: Downloading Microsoft Security Patch: - Launch web browser and navigate to the following URL:

9 - Click the download link highlighted in the image above and download the following patch: Security Update for Windows XP SP3 (KB )

10 Step 2: Install Microsoft Security Patch: Run the windows update patch installer as Administrator. The following dialog box will appear. Follow the dialog to complete the install. - - Restart system if prompted Step 3: Verify Install: - Navigate to Control Panel. Add Remove Programs - Verify Security Update for Windows XP KB is included in the list of installed windows updates. Copyright 2017 Leica Biosystems Imaging, Inc. All Rights Reserved. LEICA and the Leica logo are registered trademarks of Leica Microsystems IR GmbH. Aperio is a trademark of the Leica Biosystems group of companies in the USA and optionally in other countries. Other logos, product and/or company names might be trademarks of their respective owners Rev. A IMC REV-A 7/2017