CVE-2022-30190

CVE-2022-30190

There is a really bad zero-click microsoft exploit going around where your computer can be hijacked via a word document or online templates.


This affects any computer running Microsoft office.


Have whoever helps you with IT, disable msdt.

_____

Please open cmd as admin

  1. Go to start, type "cmd" and

  2. when the icon for the command prompt shows up,

  3. right-click on it and then select "run as administrator"

  4. Then accept any prompts.

  5. run these commands:
    (The whole command under each line is just one command)

_____

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnostics" /t REG_DWORD /v EnableDiagnostics /d 0 /f

_____

reg export HKEY_CLASSES_ROOT\ms-msdt c:\.pcs\20220601_msdt_regBackup.reg

_____

reg delete HKEY_CLASSES_ROOT\ms-msdt /f

_____

If Everything went well you should see the image below.

Good luck!!!

Run command no Reboot

Run command w Reboot in 9 Hrs


More Reading
https://msrc-blog.microsoft.com/2022/05/30/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/

A Video on How this exploit wors:

https://youtu.be/dGCOhORNKRk