How do I know if MS17 010 is installed?

Answered by John Hunt

To determine whether MS17-010 fixes have been installed on your system, you can use WMI (Windows Management Instrumentation) and Windows PowerShell. Here are the steps to follow:

1. Open Windows PowerShell: You can do this by pressing the Windows key, typing “PowerShell,” and selecting the “Windows PowerShell” app.

2. Run the following command in PowerShell to check if the MS17-010 fix is installed:
“`powershell
Get-WmiObject -Namespace “root\SecurityCenter2” -Class AntiSpywareProduct | Select-Object -ExpandProperty displayName
“`

3. The command will retrieve the names of any installed anti-spyware products on your system. Look for the presence of “Windows Defender” or any other security product that includes MS17-010 fixes in its definition updates.

– If “Windows Defender” or a similar product is listed, it indicates that the MS17-010 fix is installed.
– If no security product containing the MS17-010 fix is listed, it suggests that the fix may not be installed.

4. Additionally, you can check the file version of `%systemroot%\system32\drivers\srv.sys`, as mentioned in the chart you provided. To do this:

– Open Windows Explorer (press Windows key + E) and navigate to `%systemroot%\system32\drivers\`.
– Locate the `srv.sys` file and right-click on it.
– Select “Properties” from the context menu.
– In the Properties window, go to the “Details” tab.
– Check the “File version” property to verify if it is equal to or greater than the listed version in the chart.

– If the file version is equal to or greater than the listed version, it indicates that the MS17-010 fix is installed.
– If the file version is lower or not listed at all, it suggests that the fix may not be installed.

By following these steps, you can determine if the MS17-010 fix has been installed on your system. It’s important to regularly update your system with the latest security patches to ensure the protection of your data and system integrity.