Saturday, May 13, 2017

#WannaCrypt quickfix summary before a new wave of #ransomware appears (2017-05-13)



1.disable SMBv1 (PowerShell 2.0 or a later version)
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" SMB1 -Type DWORD -Value 0 -Force

Restart server

-----  ( EMC storage and others alert ---- see comments in Stop using SMB1 bellow)


2. install at least ms security essentials on server

https://www.microsoft.com/en-us/download/details.aspx?id=5201



3. install Microsoft Security Bulletin MS16-114
https://technet.microsoft.com/library/security/MS16-114


4. updates for older operating systems ( Windows XP, Windows 8, and Windows Server 2003)
https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/






*********************************************************************************
Readings

Stop using SMB1
https://blogs.technet.microsoft.com/filecab/2016/09/16/stop-using-smb1/

How to enable and disable SMBv1
https://support.microsoft.com/en-us/help/2696547/how-to-enable-and-disable-smbv1,-smbv2,-and-smbv3-in-windows-vista,-windows-server-2008,-windows-7,-windows-server-2008-r2,-windows-8,-and-windows-server-2012

Microsoft Security Essentials
https://www.microsoft.com/en-us/download/details.aspx?id=5201

Customer Guidance for WannaCrypt attacks
https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/

Microsoft Security Bulletin MS16-114 - Important
https://technet.microsoft.com/library/security/MS16-114

'Accidental hero' finds kill switch to stop spread of ransomware cyber-attack
https://www.theguardian.com/technology/2017/may/13/accidental-hero-finds-kill-switch-to-stop-spread-of-ransomware-cyber-attack

Privacy and data protection

Privacy and data protection https://www.youtube.com/watch?v=ZNEPaGFApX4 #privacy #liberty #freedom In the digital age, data plays ...