WannaCry ransomware worm

Windows Tips & Tricks

WannaCry ransomware worm

»» 19.MAI.2017 / updated: ---/

WannaCry ransomware worm: It spreads by exploiting an operating system vulnerability, and by the lack of Windows security update, blocking hard disk data that can only be unlocked after transferring a certain amount.

It does not necessarily spread through an infected email attachment, attackers often use traditional phishing emails, so do not open unknown email. If it is a suspicious email, delete, or quarantine.

WannaCry ransomware worm


World map of countries where it appeared:

Source: Wikipedia, the free encyclopedia ...

World map of countries where it appeared


How can it be preventedt?

First: change the base settings in Windows Firewall to protect your data.

Attention: If you are using a Windows 10 system and Auto Update is turned on, the following description should not be done because it contains the update that was automatically performed. Therefore, follow the instructions below to see if there is an upgrade for Windows Server 2003, Windows XP, Windows 8, and Windows 10.


Configure Windows Firewall and TCP Port 445

1.) Press the Windows -Logo + R keys on the keyboard at the same time.

press Windows + R keys on the keyboard

2.) In the Run dialog box, enter firewall.cpl. It will launch the Windows Firewall (Windows Defender Security Center).

Will launch Windows Firewall

3.) Click on the Advanced Settings link on the left.

Click on the Advanced Settings

4.) Click on the Inbound Rules in the left menu, then in the same window, to the right, on the New Rule link.

Click on the Inbound Rules

5.) Mark radio button Port and click on the Next button.

Mark radio button Port

6.) In the Specific Local Ports line, enter number 445 then click on the Next button.

enter number 445

7.) Select the Block the connection radio button, then click on the Next button.

Select the Block the connection

8.) Select all three cassettes, then click on the Next button.

Select all three cassettes

9.) Under Name enter 445 tcp and click on the Finish button.

Under Name enter 445 tcp

10.) Finally, if you reopen the Windows Firewall, you will see the new rule.

you will see the new rule


Configure Windows Firewall and UDP Port 445

Repeat the above settings again, but now set the UDP instead of "TCP" (based on the above we finished this step right now).

Do the following:

1.) Based on the above descriptions, re-open the Windows Firewall window and click on Inbound Rules in the left menu, then in the same window to the right of the New Rule.

click on Inbound Rules

2.) Mark radio button Port and click on Next.

Mark radio button Port

3.) Instead of "TCP," select the UDP radio button and enter 445 in the Specific Local Port line, then click on the Next button.

Instead of TCP select the <b>UDP

4.) In the next window, select the Block the connection radio button, then click on the Next.

select the Block the connection

5.) Select all three cassettes, then click on the Next button.

Select all three cassettes

6.) Under Name enter number 445 udp, and then click on the Finish.

Under Name enter number 445 udp

7.) Finally, if you reopen the Windows Firewall, you will see two new banning rules.

you will see two new banning rules

Now you can close all windows.

END

at the top of the page