Best way to protect against WannaCry

[CAPSLOCKSTUCK]

i am using IObit Malware Fighter and Defender .......what else should i do?

 

[INSTG8R]

Turn off SMB in Windows Features. Just turned mine off

 

[Countryside]

Make sure that you have a backup and and keep your defender and fighter up-to-date.
According to Microsoft if you are using Win10 and it has the latest updates you should be protected.

I heard that they even released a patch for windows xp.

 

[R-T-B]

i am using IObit Malware Fighter and Defender .......what else should i do?

Apply the patch?

 

[Octopuss]

I would say not being an idiot is almost 100% protection against this crap. Don't click on any stupid links from fishy emails.

 

[R-T-B]

I would say not being an idiot is almost 100% protection against this crap. Don't click on any stupid links from fishy emails.

It's an SMB port worm vulnerability. You don't have to. That's part of the reason it spread so bad.

At the rate of misinformation in this thread, aparently my decision to skip this for a news article was a poor one.

 

[Octopuss]

I thought people always get infected with this stuff purely because they clicked on fishy links.
Are you saying one can theoretically get infected with this by just having his PC turned on?

 

[burebista]

Are you saying one can theoretically get infected with this by just having his PC turned on?

Yep, if you're unpatched and have ports UDP 137/138 and/or TCP 139/445 open to Internet.

 

[CAPSLOCKSTUCK]

At the rate of misinformation in this thread, aparently my decision to skip this for a news article was a poor one.

Please do the news article........i want a definitive guide, from someone i trust, so i can pass it on to my friends and relatives.

 

[R-T-B]

I thought people always get infected with this stuff purely because they clicked on fishy links.
Are you saying one can theoretically get infected with this by just having his PC turned on?

Yes, if the smb port is exposed anyways. In a default windows setup it is.

Please do the news article........i want a definitive guide, from someone i trust, so i can pass it on to my friends and relatives.

Wish I'd done it sooner if we were going for "news", but probably will do a forum post if nothing else tomorrow. In the meantime your best defence is honestly to run Windows Update until it drops.

 

[Caring1]

I read up about the patch online at Microsoft and was under the impression it was for Server versions only.
And acronyms wear a bit thin and lose their meaning when multiple industries use the same one for differing meanings, case in point, to me an SMB has always meant a Small to Medium Business.

 

[R-T-B]

I read up about the patch online at Microsoft and was under the impression it was for Server versions only.
And acronyms wear a bit thin and lose their meaning when multiple industries use the same one for differing meanings, case in point, to me an SMB has always meant a Small to Medium Business.

Server Message Block in this case, it's the Windows file sharing protocol. It is on by default, and vulnerable.

At any rate a patch was even made available for XP, so it's certainly there if you look.

 

[Octopuss]

Yes, if the smb port is exposed anyways. In a default windows setup it is.

Isn't that related to local networks only though?

 

[Caring1]

... it's certainly there if you look.

I'm fully up to date so it should be installed already *crosses fingers.
I don't really care either way as there's nothing in particular worth stressing about on my computers, and a quick wipe and re-install should fix it.

 

[Nosada]

It's SMB1 specifically, which is disabled by default in W10. Also, who the hell has SMB ports open to the internet? The virus most definitely DOES get in via fishy mails, but can spread via SMB1 afterwards.

Source: Just spent a week hardening 152 BU's to this crap, because not everyone was smart enough to install the windows patch that made you immune to this 2 months ago when EternalBlue was leaked and MS released MS17-010.

 

[P4-630]

Well I got this popup from Comodo Firewall (free) a few days ago:

 

[CAPSLOCKSTUCK]

It's SMB1 specifically, which is disabled by default in W10

i just disabled mine.......it was ON by default.

 

[INSTG8R]

i just disabled mine.......it was ON by default.

Exactly so was mine. So easy to do, so just do it.

 

[Caring1]

i just disabled mine.......it was ON by default.

Care to explain how?

 

[rtwjunkie]

I thought people always get infected with this stuff purely because they clicked on fishy links.
Are you saying one can theoretically get infected with this by just having his PC turned on?

Yes. And not just theoretically. For real. and not the first infection that can be gotten without clicking on suspicious links or by going to dodgy websites.

 

[CAPSLOCKSTUCK]

if we can keep it civil, this thread could be a good resource.

 

[burebista]

p.s. there is no SMB setting in W7 Windows Features.

Yep, you should do some stuff to disable SMBv1.

 

[HTC]

Tried to do a search for it, as i too am a Windows 7 user and came up with this. Problem is i dunno if i even need it because i'm not running a server and also, it doesn't show in the windows feature section either:



EDIT

If you can't find Windows Features I feel sorry for you...it's not moved since XP

Don't assume that, just because you know how to do something, everyone else does too. Also, it's not in windows features, as the pic above clearly shows.

 

[ShurikN]

This patch that everyone is talking about, did it come with Creators update, or do you have to install it by yourself?

 

[Liviu Cojocaru]

I am an IT technician and these days it's all about this damn exploit, best thing to do in this case is to keep your Windows and Antivirus up to date, also avoid opening email attachments if you're not 100% sure of the provenience of the file.

How to disable SMB:

http://www.vinransomware.com/blog/h...ndows-machines-to-prevent-wannacry-ransomware