WannaCry Ransomware attack - please install MS17-010

[brolly33]

Great post from @BaiYunfei with a quick analysis to check version of srv.sys for MS17-010:

WannaCry Vulnerability: Custom Analysis created to detect for Vulnerability referenced in MS17-010

Since the outbreak of the WannaCry ransomware, Microsoft has indicated that MS17-010 is the security patches that fixes this vulnerability. However, due to Microsoft’s patch supersedence rule and the nature of their new servicing model aka. Monthly Rollup and Security Only patches, it has been difficult for users to decide whether their devices have been patched. I created the following custom Analysis aiming to detect whether the vulnerability has been patched, by querying the file version of …