Does this mean these servers are infected by the Wannacry SMBv1

  • 1
  • Question
  • Updated 10 months ago
Photo of Aisling Brennan

Aisling Brennan, Official Rep

  • 390 Posts
  • 8 Reply Likes

Posted 10 months ago

  • 1
Photo of Aisling Brennan

Aisling Brennan, Official Rep

  • 390 Posts
  • 8 Reply Likes

No, not infected with anything. What it is telling you is that the servers are communicating using the SMBv1 protocol. This protocol was the one used by Wannacry to spread around networks where patch MS17-010 was not deployed.

https://technet.microsoft.com/en-us/library/security/ms17-010.aspx

The advice would be to switch off SMBv1 or at the very least make sure this patch is applied.