Ransomware Bitcoin Worm Solution

WannaCry ransomware used in widespread attacks all over the world

##Customer Guidance for WannaCrypt attacks(Microsoft Security Response Center)

How to enable and disable SMBv1, SMBv2, and SMBv3 in Windows and Windows Server

Exploiting the MS17-010 vulnerability to blackmail Bitcoin worm analysis report

In response to the ransomware “WannaCry”, Antiy releases a boot guide

WannaCry Blackmail Bitcoin worm solution:

Baidu network disk download: https://pan.baidu.com/s/1hsutLFA

CSDN download: http://download.csdn.net/detail/sunrain_hjb/9842124

Step 1: Configure Windows Firewall to block ports 135-139 and 445 Port, just run foreverblue.bat.

Step 2: InstallWindows Patch

Microsoft Security Bulletin MS17-010 - Critical

http://www.catalog.update.microsoft.com /Search.aspx?q=KB4012212

http://www.catalog.update.microsoft.com/Search.aspx?q=KB4012215

http://www.catalog.update.microsoft.com/Search.aspx?q=KB4019264

Step 3: Disable Service service

#Confirm port

status, run Command netstat -an | find "13" and netstat -an | find "44" to confirm that port 445 is disabled.

The above is the detailed content of Ransomware Bitcoin Worm Solution. For more information, please follow other related articles on the PHP Chinese website!