Jump to content

Eternal Blue checker help?

Recommended Posts

Failed to get version of 'C:\WINDOWS\system32\Drivers\srv.sys'.
We are unable to tell if your computer is vulnerable.
I get this message every time I use the eternal blue checker, how to check manually or fix this?

Link to post
Share on other sites
On 11/20/2020 at 2:03 AM, Marcos said:

I'd suggest using Procmon to find out if tool gets access denied on the file. Did you run the tool as an administrator?

Yes I ran as admin but it continues to show, also what is Procmon, and how do I fix this?

Link to post
Share on other sites

I can verify the tool no longer works on Win 10 20H2.

Believe the issue is the driver it is attempting to verify, C:\WINDOWS\system32\Drivers\srv.sys, no longer exists. In 20H2, it is named srv2.sys.

Guess tool needs to be updated in that if it can't find srv.sys, you also are not vulnerable to EternalBlue.

Link to post
Share on other sites
8 hours ago, Hydra said:

So my pc is 20H2 right? Does that mean its patched?


Here's a Microsoft article detailing Windows versions vulnerable to EternalBlue: https://support.microsoft.com/en-us/help/4023262/how-to-verify-that-ms17-010-is-installed

Also I realized why srv.sys no longer exists on my device. Windows will auto remove SMBv1 10 days after installation if it is not used. Additionally if srv.sys exists on later Win 10 installations, you are not vulnerable since this driver has been patched against this exploit.

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    No registered users viewing this page.

  • Create New...