Check your covered against the WannaCry ransomware exploit
you'll need to make sure you have the Microsoft SMB patch MS17-010 KB4013389
looks like they combined KB's for this fix - list of KB's to check per O/S
Doesn't seem to be consistent on the KB's required
Windows Vista (all editions) KB4012598
Windows Server 2008 (all editions) KB4012598
Windows 7 (all editions) KB4012212
Windows Server 2008 R2 (all editions) KB4012212
Windows 8.1 (all editions) KB4012213
Windows Server 2012 and Windows Server 2012 R2 (all editions) KB4012214
Windows 10 (all editions) KB4012606
Windows Server 2016 (all editions) KB4013429
example's
Open a powershell prompt and type this:
get-hotfix | out-string -stream | select-string "KB4013389"
get-hotfix | out-string -stream | select-string "KB4012606"
powershell script Don't forget to change the Computername name
$hotfixes = "KB4012212", "KB4012213", "KB4012214", "KB4012215", "KB4012216", "KB4012217", "KB4012219", "KB4012220", "KB4012598", "KB4012606", "KB4013198", "KB4013429", "KB4015217", "KB4015438", "KB4015549", "KB4015550", "KB4015551", "KB4015552", "KB4015553", "KB4015554", "KB4016635", "KB4019215", "KB4019216", "KB4019263", "KB4019264", "KB4019472", "KB4018466", "KB4013389", "KB2919355"
#This variant is for manual entry server names
#$Computername = "server1", "server2","server3","server4","server5"
$Computername = "CHANGE_ME"
foreach ($comp in $Computername) {
$hotfix = Get-HotFix -ComputerName "$Comp"| Where-Object {$hotfixes -contains $_.HotfixID} | Select-Object -property "HotFixID"
if (Get-HotFix | Where-Object {$hotfixes -contains $_.HotfixID})
{
"Found HotFix on $Comp : " + $hotfix.HotFixID
} else {
"Didn’t Find HotFix on $Comp"
}
}
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4012212"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4012213"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4012214"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4012215"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4012216"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4012217"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4012219"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4012220"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4012598"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4012606"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4013198"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4013429"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4015217"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4015438"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4015549"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4015550"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4015551"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4015552"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4015553"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4015554"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4016635"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4019215"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4019216"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4019263"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4019264"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4019472"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4018466"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB4013389"
Get-WmiObject -Class "win32_quickfixengineering" | out-string -stream | select-string "KB2919355"
check the windows update history
some pages to look at
https://support.microsoft.com/en-us/help/4013389/title
https://technet.microsoft.com/en-us/lib ... 7-010.aspx
https://superuser.com/questions/1208741 ... ed/1208745
hope this helps
Cheers
Rescue PC