Windows 10: WannaCry

I tried turning off SMB1. I turned it back on again when I discovered I could no longer see the USB HDD that's plugged into my router and shared out. Others have reported the same problem with their NAS drives.

 

My SMB1 has been turned off for last 3 days, no issues that I can see. *Smile
My advice is turn it off, then see if you have any problems.

 

cool will switch it off here and see if i can still see all my network stuff that's connected.

 

Does your router manufacturer have a firmware update to fix that?

 

You can in theory disable SMB1 via cmd line and enable SMB2/3 only, MS howto for Win8 https://support.microsoft.com/en-gb/...ws-server-2012,
Doesn't appear to be much use on Win10 home though. It appears that unticking SMB1 in Windows features or disabling it by command line removes common files required for Workstation! After about 8 hours of trying to get SMB2/3 working without SMB1 and ending up with a dead Network even after re-enabling it, I gave up and restored the image I took before starting to mess with it, need to be able to talk to the Linux stuff.

Just disabling SMB1 in Features wiped out my networked Linux PC's.

 

*Sad That's not good.

 

i just turned it off and i could not see my smart TVs or my xbox one WTF microsoft.

 

SMB is a protocol included in windows to work with devices that use this, what is now an older, protocol if you switch it off then any device that relies on it will not be visible on your Local network *Wink

 

Ugh that includes my brand new 4K smart tvs and my xbox one S OMG why they use a outdated protocol

 

It's not really outdated, but it has been updated at least twice, as SMB2 and SMB3 are both active. I think a lot of devices are using it due to an "if it ain't broke don't fix it" attitude, but the later versions are I think more secure so in one way it is broken. It's also I think still used in a lot of Linux distros which are then adapted for use as embedded controls for tv's etc.

 

how do i check for those other ones??

 

To be honest it's a little vague to say the least The SMB 1 protocol is depreciated in windows 10 but a lot of other devices still use it , as you have discovered

This gives the exact state (as of 2 years ago when Windows 10- was just being released) of what windows uses what ...

The Deprecation of SMB1 s Blog

All I can say is to not worry about it at the moment as most people will still need it - the best is to disable it temporarily and if it causes problems then re-enable it - If you have no issues (no other devices need it), then removing SMB 1 is a good idea - Anything else should be left alone as they are still active - All are now patched in Win 10 where needed so are safe, they will continue to be patched in future if need arises, so the standard advice is the same as always be careful what you click on, be careful where you surf to, and if an offer looks to be to good to be true it probably is *Wink

 

SMB2 and 3 come as a pair if SMB2 is enabled, then so is SMB3.
To check run this in powershell.
Code: Get-SmbServerConfiguration | Select EnableSMB1Protocol, EnableSMB2Protocol[/quote] Which gives you this.

Code: Windows PowerShell Copyright (C) 2016 Microsoft Corporation. All rights reserved. PS C:\WINDOWS\system32> Get-SmbServerConfiguration | Select EnableSMB1Protocol, EnableSMB2Protocol EnableSMB1Protocol EnableSMB2Protocol ------------------ ------------------ True True PS C:\WINDOWS\system32>[/quote]

 

Thanks for that they are on *Smile

 

Reposting this here, in case someone needs it:

So there's a possibility to get your encrypted files back...for some....
WannaDecrypt your files? The WannaCry solution, for some - Malwarebytes Labs | Malwarebytes Labs