MSDT(Follina) Vulnerability-Hotfix

Step:1

  • Download the Follina folder containing msdt.ps1 file
  • Save it in location: C:\Users\your user name\Desktop\Follina

Eg: C:\Users\merlin.george\Desktop\Follina

 

Follina

Step:2

  • Click on File> Open Windows PowerShell as administrator
  • Click Yes in the windows prompt and allow the app to make changes.

Step:3

Enter these commands:

Set-ExecutionPolicy remoteSigned

Enter y to continue

If you find any error/warning, enter the below command and continue

Set-ExecutionPolicy -Scope Process -ExecutionPolicy Bypass

Step:4

Enter these commands

.\msdt.ps1

Enter y to continue

As a result, a backup file named “msdturlprotocol.reg” will also be automatically created in the your current location (C:\Users\...\Follina\) as shown in the below screenshot.

Note: This backup file(msdturlprotocol.reg) is required to undo the hotfix once Microsoft releases a patch. So, please keep this file.

Step:5

To verify the change, enter the command .\msdt.ps1 again and you will receive an output as in the below screenshot confirming the system is now free from the Follina vulnerability.

Step:6

Enter these commands to revert the execution policy to restricted mode.

Set-ExecutionPolicy restricted

Enter y to continue

Congratulations! You have successfully completed the change.