Forum Discussion

manhattan9305's avatar
manhattan9305
Copper Contributor
Jun 27, 2021

SMBClient in Event Viewer

Hi there, I am quite concerned as when looking in my Event Viewer (Windows 10) and looking under Applications and Services, and then SMBClient Connectivity, I am seeing over 9,000 entries dating ba...
A1-A1's avatar
A1-A1
Gold Contributor
Jun 28, 2021

manhattan9305 

Hi
you can disable SMB1 - if you have it still running.
Control Panel> Windows > SMB1- disable.
Write if it works!
Good luck

  • manhattan9305's avatar
    manhattan9305
    Copper Contributor
    Jun 28, 2021

    Thank you for your reply.. the problem is when I look at Control Panel, I don’t see anywhere saying “Windows”. I see “System & Security, Network and Internet, Hardware and Sound, Programs, User Accounts, Appearance and Personalisation, Clock and Region, and Ease of Access”.
    Also, would you be able to explain if those notifications saying SMBClient in my Event Viewer mean that somebody has been remotely accessing the computer? I’m concerned about that, and despite trying to do a lot of research online, I’m still unclear on what this means.

    I’m also seeing events for WMI-Activity and OpenSSH, two things I am not familiar with and don’t really understand
    Thanks so much for your help, I appreciate it

    • A1-A1's avatar
      A1-A1
      Gold Contributor
      Jun 28, 2021

      manhattan9305 

      Of course Windows Features!
      In the control panel it is where - uninstall the program!
      This outdated feature can be disabled!

      • manhattan9305's avatar
        manhattan9305
        Copper Contributor
        Jun 28, 2021
        Okay thank you very much,
        Would you be able to explain to me what SMBClient is? I have done some research but I don’t really understand. Does this mean someone has accessed my computer remotely? Thanks for your help

Resources