NotPetya runs inmediatly after infection or can be there and being executed even do i have all the security patches?

closed as unclear what you're asking by Steffen Ullrich, forest, AndrolGenhald, Overmind, A. Hersean May 7 at 13:35

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.


NotPetya used the EternalBlue exploit in Windows’ SMB file-sharing system for spreading. The vulnerability is patched on every current Windows version (MS17-010). This only means you can't get infected with this variant – or any other malware using the same exploit – through SMB. The original Petya didn't use EternelBlue, but required the user to grant it administrative privileges.

But this is just trivia; there's no particular reason to be afraid of a single malware like this.

Not the answer you're looking for? Browse other questions tagged or ask your own question.