[Samba] Windows 10 spawning thousands of child processes on Samba 4.3.11 server

[Rowland Penny]

On Tue, 23 May 2017 08:44:42 +0200
"L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:

> Did you TV/Radio broke??  ;-) 
> 
> This really smells like some malware/cryptoware. 
> Seen this ones on a network, and that was a cypto trying to write to
> shares. And they to that really really fast. 
> 
> Increast the samba debug logs and track if this is client related. 
> That where i would start. 
> 

They were my thoughts, the connections are from guest by the look of
them and removing 'map to guest = Bad User' would reset it to 'map to
guest = Never' and the connections would be dropped.

I think the OP needs to start looking at their clients ;-)

Rowland