PowerShell检查NSA永恒之蓝MS17-010漏洞补丁

ShowCode

1. # Windows XP, Windows Vista, Windows 8, Windows Server 2008
   
2. Get-HotFix | Where-Object { $_.HotfixID -eq 'KB4012598' } | Format-Table -AutoSize
   
3. 
   
4. # Windows 7 SP1, Windows Server 2008 R2 SP1
   
5. Get-HotFix | Where-Object { $_.HotfixID -eq 'KB4012212' -or $_.HotfixID -eq 'KB4012215' } | Format-Table -AutoSize
   
6. 
   
7. # Windows 8.1, Windows Server 2012 R2
   
8. Get-HotFix | Where-Object { $_.HotfixID -eq 'KB4012213' -or $_.HotfixID -eq 'KB4012216' } | Format-Table -AutoSize
   
9. 
   
10. # Windows Server 2012
    
11. Get-HotFix | Where-Object { $_.HotfixID -eq 'KB4012214' -or $_.HotfixID -eq 'KB4012217' } | Format-Table -AutoSize
    
12. 
    
13. # Windows 10
    
14. Get-HotFix | Where-Object { $_.HotfixID -eq 'KB4012606' -or $_.HotfixID -eq 'KB4013198' -or $_.HotfixID -eq 'KB4013429' } | Format-Table -AutoSize

复制代码

参考信息：
https://technet.microsoft.com/zh-cn/library/security/MS17-010
https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/

codegay

1. Get-HotFix : The term 'Get-HotFix' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spellin
   
2. g of the name, or if a path was included, verify that the path is correct and try again.
   
3. At line:1 char:1
   
4. + Get-HotFix | Where-Object { $_.HotfixID -eq 'KB4012606' -or $_.Hotfix ...
   
5. + ~~~~~~~~~~
   
6.     + CategoryInfo          : ObjectNotFound: (Get-HotFix:String) [], CommandNotFoundException
   
7.     + FullyQualifiedErrorId : CommandNotFoundException

复制代码

codegay

ps 6.0
windows 7

ShowCode

回复 3# codegay


你的版本好高，我的 Win 7 + PS 4.0 没问题。试试这个呢：

1. Get-WmiObject -Query "Select * from Win32_QuickFixEngineering where HotFixID= 'KB4012212'"

复制代码

codegay

6.0是在官方的github下载安装的。。

1. PS C:\Program Files\PowerShell\6.0.0.17> Get-WmiObject -Query "Select * from Win32_QuickFixEngineering where HotFixID= 'KB4012212'"
   
2. Get-WmiObject : The term 'Get-WmiObject' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the s
   
3. pelling of the name, or if a path was included, verify that the path is correct and try again.
   
4. At line:1 char:1
   
5. + Get-WmiObject -Query "Select * from Win32_QuickFixEngineering where H ...
   
6. + ~~~~~~~~~~~~~
   
7.     + CategoryInfo          : ObjectNotFound: (Get-WmiObject:String) [], CommandNotFoundException
   
8.     + FullyQualifiedErrorId : CommandNotFoundException

复制代码

对PS不懂。不知道是怎么回事了。

老刘1号

表示端口全部关了……

老刘1号

回复 5# codegay


    Get-WmiObject和Get-HotFix这俩个Cmdlet都没有……

codegay

回复 7# 老刘1号


    不是我不知道没有。
而是我不知道为什么没有。

ShowCode

回复 5# codegay


    6.0现在是Beta版吧，不知道将来GA的版本会怎样。

xxbdh

命令行下用 systeminfo | find "KB4012606" 是不是更简单些？

ShowCode

回复 10# xxbdh


    我的Win7安装KB4012212之后用这个方法查不出来