How to STOP the wanna cry ransomware infecting your machine

How to STOP the wanna cry ransomware infecting your machine

How to STOP the wanna cry ransomware infecting your machine

There are good cops and bad cops, unfortunately, it takes a bit of time for the good cops to catch up with the bad cops, but they usually get caught.

The wanna Cry ransomware is the most recent ransomware which has already infected 200,000 computers around the world. Once your machine is infected, it encrypts your files and displays the ransomware note.

There have been so many businesses hit by this ransomware, and especially if you are a small business, it is critical as you probably may not have an IT department to ensure your systems are backed up and also to take care of these kinds of threats.

However, there are already patches in place which will help you to ensure that your machine is safe.

If you have been infected by the wanna Cry ransomware read Section 2 . LINK etc

If you have not been affected by the wanna Cry ransomware it will be wise to read through the below article which provides details about the patches which has been released by Microsoft.

First things first, there is already a patch by Microsoft which is available to download from the below link

https://technet.microsoft.com/en-us/library/security/ms17-010.aspx

The KB Articles are below :-

  • KB4019216 — Windows 8 and Windows server 2012
  • KB4019264 — Windows 7 and Windows 2008 R2
  • KB4019215 — Windows 8.1 and Windows 2012 R2
  • KB4018466 — Windows Server 2008
  • KB4019472 — Windows 10 Version 1607 for x64-based Systems
  • KB4019473 — Windows 10 Version 1511 for x64-based Systems
  • o download, visit – http://www.catalog.update.microsoft.com/

Customer Guidance for WannaCrypt attacks from Microsoft –

Customer Guidance for WannaCrypt attacks

Clicking Links in unsolicited Email is not really funny!

Trust no one. Literally. I have heard this on numerous occasions that I clicked the link because I thought the cat was funny or I clicked the link because I thought the email was from a genuine source.

Check the domain from where the email is coming or else get a spam filtering service which will probably take care of such emails. However, the user needs to be vigilant and stay up to date.

The Drive which is catching dust?

Now that your machine is patched up, and hopefully all other computers on the network, let us ensure that we check the drive which is proably catching dust and is supposedly to be the back up drive.

Windows already has a decent back up utility tool and can do the trick. The recommended back up for a small businesses is to have two swappabled drives for back up and an offiste backup. If you dont have an offsite back up, Amazon has really great prices and can be easily configured.

The AntiVirus which has not been renewed ?

It is not funny the amount of time I have visited the client site to realise that the AV licensing is Expired ! If the AV licensign is expired it is not going to keep your machine safe and secure.

Also not having AntiVirus installed on all the machines in the network is not recommended at all.
Having one type of AntiVirus on all machines is recommended. – helps with licensing and management.
Scheduled scans – Not having scheduled scan is just asking for trouble – Daily and Weekly scans are recommended.

Windows XP –

Seriously this operating sysmtem has come to an end of life – It is probably 15 + years old and expecting it to still work and be safe is just been ignorant. Though microsoft has released a patch for Win XP , I would highly recommend not having an Win XP in your organisation.

3. Create Five Main Points

Clean up –

AV Scan

asdas

Malware Scan

4. Share One Piece of Research in Each Point

5. Add Images to Prove Your Point

6. Create a Conclusion

Isn’t the Cyber Attack Over?

Absolutely not.