How to disable SMB1 on Windows XP and Windows Server 2003

Hello there :stuck_out_tongue:
So theres an SMB exploit and theres a virus called GandCrab v4.1 that spreads via an SMB exploit.
So im going to give you a tutorial how to disable it

  1. Press the windows logo key on keyboard and the letter R
  2. type sc.exe config lanmanworkstation depend= bowser/mrxsmb20/nsi
    after that Press the windows logo key on keyboard and the letter R again
  3. type sc.exe config mrxsmb10 start= disabled and your done!
    Atleast this will help stoping to spread viruses who uses this exploit.I hope you have a good day.Peace out!:stuck_out_tongue:
    Oh and heres some articles
    https://www.theregister.co.uk/2018/07/09/legacy_windows_ransomware/
    https://doublepulsar.com/gandcrab-v4-1-in-the-wild-first-windows-xp-and-server-2003-impacting-ransomware-smb-worm-7a7250253b6
1 Like


I already had it off, but, shit happens boi
It technically affects every Windows version with SMB1 on

Well its easy to disable on newer versions of Windows but on XP and server 2003 its not easy to find to disable it so thats why i made this topic :stuck_out_tongue:


i
k
n
o
w

jeez ok

2 Likes

Or maybe don’t use Windows XP or Server 2003 in production? That’s a better solution.

No

P R O D U C T I O N E N V I R O N M E N T

body seems super clear