Best way to protect against WannaCry

SnakeDoctor · May 17, 2017

Eset up to date - ESET detects and blocks the WannaCryptor.D threat and its variants
Turned off smb in Win8.1

INSTG8R · May 17, 2017

I'm wondering if it's still BITS on W7?

HTC · May 17, 2017

Liviu Cojocaru said:
I am an IT technician and these days it's all about this damn exploit, best thing to do in this case is to keep your Windows and Antivirus up to date, also avoid opening email attachments if you're not 100% sure of the provenience of the file.

How to disable SMB:

http://www.vinransomware.com/blog/h...ndows-machines-to-prevent-wannacry-ransomware

Used the powershell method but copy / paste wasn't working because it wasn't the same as what was in the powershell pics: once i matched it, it was done.

Thanks.

Countryside · May 17, 2017

ShurikN said:
This patch that everyone is talking about, did it come with Creators update, or do you have to install it by yourself?

Patch is in windows update you dont have to download it manually just make sure that your pc has checked and downloaded the latest updates.

So a little preventing Summary

1.Make sure windows is up-to-date
2.Antivirus is up-do-date
3.Do not visit dodgy websites and do not open unknown emails.

HTC · May 17, 2017

Countryside said:
Patch is in windows update you dont have to download it manually just make sure that your pc has checked and downloaded the latest updates.

So a little preventing Summary

1.Make sure windows is up-to-date
2.Antivirus is up-do-date
3.Do not visit dodgy websites and do not open unknown emails.

The highlighted part is relative because it could very well be from a known friend that just happened to be (unknown to him / her) compromised.

jboydgolfer · May 17, 2017

mine was set t off (win10) i cant recall if i turned it off, as for years i have been removing what i didnt use from the features list.....maybe it turned out to be a good habit :rolleyes:

...

looks like V1 isnt turned off though.

rtwjunkie · May 17, 2017

Countryside said:
Patch is in windows update you dont have to download it manually just make sure that your pc has checked and downloaded the latest updates.

So a little preventing Summary

1.Make sure windows is up-to-date
2.Antivirus is up-do-date
3.Do not visit dodgy websites and do not open unknown emails.

Good advice, except Wannacry didn't spread by #3.

Also, a good percentage of people's other infections happen via "drive by" at known websites.

metalslaw · May 17, 2017

Good info on how this variant has already been disabled,

https://www.malwaretech.com/2017/05/how-to-accidentally-stop-a-global-cyber-attacks.html

However, there is every chance another variant can come along, so patch your o/s

R-T-B · May 17, 2017

Nosada said:
It's SMB1 specifically, which is disabled by default in W10. Also, who the hell has SMB ports open to the internet?

A lot more than we'd like to believe, judging from the spread. Then again, I know tons of people who plug in directly to their modem and assume Windows Firewall has them covered. It does not.

Pretty sure SMB1 is enabled in Windows 10 by default too, the shares are just shutdown. That is enough.

jboydgolfer · May 17, 2017

R-T-B said:
Pretty sure SMB1 is enabled in Windows 10 by default too

Your assumption is Correct (confirmed)

INSTG8R · May 17, 2017

jboydgolfer said:
Your assumption is Correct (confirmed)

Oh yes it's on. I've already walked a few friends thru it already to turn it off.

TheMailMan78 · May 17, 2017

Jesus Christ just keep your OS updated and your anti-virus updated. MS even updated XP for this one because some dumbass governments still use it. No need to turn anything off.

Its really NOT a big deal. Only thing that made this ransomware famous is the fact its source code came from the NSA via a leak.

Nothing to see here. Unless you are super cool 1337 haxor that doesn't update their OS because Microsoft is a capitalist pig and anti-viruses are for noobs. Then you might have an issue.

alucasa · May 17, 2017

I forgot what version of smb Samba uses.

TheMailMan78 · May 17, 2017

alucasa said:
I forgot what version of smb Samba uses.

No need to turn it off man.

Solaris17 · May 17, 2017

The SMB just prevents the worm from hitting you. even with it enabled if you are patched up you should be fine. However the initial infection can also come from an email.

Make sure that you are not opening PDFs and other attachments from stuff you know nothing about. A popular attack vector right now is forged UPS/FedEx emails. Didn't order anything? Then you DON'T have a package waiting.

alucasa · May 17, 2017

UK's hospital network was hit hard. The media claimed it was an attack but I bet 4 quid that some dude opened a dodgy e-mail attachment.

HTC · May 17, 2017

alucasa said:
UK's hospital network was hit hard. The media claimed it was an attack but I bet 4 quid that some dude opened a dodgy e-mail attachment.

Over here as well: wouldn't be surprised if that was the reason either!

TheMailMan78 · May 17, 2017

alucasa said:
UK's hospital network was hit hard. The media claimed it was an attack but I bet 4 quid that some dude opened a dodgy e-mail attachment.

Yeah I would have someones head for two things. Not keeping the system patched and updated AND find out computer zero is in that network. They need some IT education.

Its peoples health and they have REE REEs running the IT department.

RejZoR · May 17, 2017

Proof that antiviruses still make sense and dismissing them as useless is just idiotic:
http://weblog.av-comparatives.org/proactive-protection-wannacry-ransomware/

All 4 free antiviruses (avast!, AVG, AVIRA and Panda) protected from WannaCry before it was even spreading (proactively). There is also free tool called RansomFree which is proactive ransomware countermeasure. If people still get hit hard while all this free stuff is laying around, I can only call that pure idiocy.

Octopuss · May 17, 2017

rtwjunkie said:
Good advice, except Wannacry didn't spread by #3.

How, then? I am not really sure I understand. Local networks, sure. But through internet? That doesn't make any sense (to me). Someone would have to be scanning obscene IP ranges to find open ports. I can't think of any other way this sort of stuff could spread without the (l)user doing something.

P4-630 · May 17, 2017

Ok just disabled Smb1 on my windows 8.1 system. (it was enabled).
I don't have a network of computers at home anyway.

RejZoR · May 17, 2017

Octopuss said:
How, then? I am not really sure I understand. Local networks, sure. But through internet? That doesn't make any sense (to me). Someone would have to be scanning obscene IP ranges to find open ports. I can't think of any other way this sort of stuff could spread without the (l)user doing something.

It literally spreads without user doing ANYTHING (other than having unprotected system by either not updating it regularly or not using antivirus).

bogmali · May 17, 2017

Thread cleansed....If you're going to offer help, please do not be a jerk about it :shadedshu:

BiggieShady · May 17, 2017

Some good advices but nobody mentioned the first line of defense ... use NoScript and AdBlock Plus browser extensions whenever surfing for porn and warez

rtwjunkie · May 17, 2017

BiggieShady said:
Some good advices but nobody mentioned the first line of defense ... use NoScript and AdBlock Plus browser extensions whenever surfing for porn and warez

System Name	Ground Control
Processor	Intel i5 2500k 4 Ghz
Motherboard	MSI P67A-GD80 B3
Cooling	Cooler Master Hyper 212x
Memory	2 x 4GB DDR3 1600mhz Apacer Black Panther
Video Card(s)	Msi GTX 1060 OC 3Gb
Storage	2 x 250Gb WD Blue raid 0 + 1Tb Wd Green
Display(s)	Samsung BX2450 24" Led
Case	GMC X7 X-Station
Power Supply	HEC Raptor 500watt
Mouse	Logitech G9
Software	Windows 8.1
Benchmark Scores	Power Level over 9000

System Name	Hellbox 5.1(same case new guts)
Processor	Ryzen 7 5800X3D
Motherboard	MSI X570S MAG Torpedo Max
Cooling	TT Kandalf L.C.S.(Water/Air)EK Velocity CPU Block/Noctua EK Quantum DDC Pump/Res
Memory	2x16GB Gskill Trident Neo Z 3600 CL16
Video Card(s)	Powercolor Hellhound 7900XTX
Storage	970 Evo Plus 500GB 2xSamsung 850 Evo 500GB RAID 0 1TB WD Blue Corsair MP600 Core 2TB
Display(s)	Alienware QD-OLED 34” 3440x1440 144hz 10Bit VESA HDR 400
Case	TT Kandalf L.C.S.
Audio Device(s)	Soundblaster ZX/Logitech Z906 5.1
Power Supply	Seasonic TX~’850 Platinum
Mouse	G502 Hero
Keyboard	G19s
VR HMD	Oculus Quest 2
Software	Win 10 Pro x64

System Name	HTC's System
Processor	Ryzen 5 2600X
Motherboard	Asrock Taichi X370
Cooling	NH-C14, with the AM4 mounting kit
Memory	G.Skill Kit 16GB DDR4 F4 - 3200 C16D - 16 GTZB
Video Card(s)	Sapphire Nitro+ Radeon RX 480 OC 4 GB
Storage	1 Samsung NVMe 960 EVO 250 GB + 1 3.5" Seagate IronWolf Pro 6TB 7200RPM 256MB SATA III
Display(s)	LG 27UD58
Case	Fractal Design Define R6 USB-C
Audio Device(s)	Onboard
Power Supply	Corsair TX 850M 80+ Gold
Mouse	Razer Deathadder Elite
Software	Ubuntu 19.04 LTS

Processor	11700
Motherboard	TUF z590
Memory	G.Skill 32gb 3600mhz
Video Card(s)	ROG Vega 56
Case	Deepcool
Power Supply	RM 850

System Name	HTC's System
Processor	Ryzen 5 2600X
Motherboard	Asrock Taichi X370
Cooling	NH-C14, with the AM4 mounting kit
Memory	G.Skill Kit 16GB DDR4 F4 - 3200 C16D - 16 GTZB
Video Card(s)	Sapphire Nitro+ Radeon RX 480 OC 4 GB
Storage	1 Samsung NVMe 960 EVO 250 GB + 1 3.5" Seagate IronWolf Pro 6TB 7200RPM 256MB SATA III
Display(s)	LG 27UD58
Case	Fractal Design Define R6 USB-C
Audio Device(s)	Onboard
Power Supply	Corsair TX 850M 80+ Gold
Mouse	Razer Deathadder Elite
Software	Ubuntu 19.04 LTS

Best way to protect against WannaCry

SnakeDoctor

INSTG8R

Vanguard Beta Tester

HTC

Countryside

HTC

jboydgolfer

rtwjunkie

PC Gaming Enthusiast

metalslaw

R-T-B

jboydgolfer

INSTG8R

Vanguard Beta Tester

TheMailMan78

Big Member

alucasa

TheMailMan78

Big Member

Solaris17

Super Dainty Moderator

alucasa

HTC

TheMailMan78

Big Member

RejZoR

Octopuss

P4-630

RejZoR

bogmali

In Orbe Terrum Non Visi

BiggieShady

rtwjunkie

PC Gaming Enthusiast

System Name	Americas cure is the death of Social Justice & Political Correctness
Processor	i7-11700K
Motherboard	Asrock Z590 Extreme wifi 6E
Cooling	Noctua NH-U12A
Memory	32GB Corsair RGB fancy boi 5000
Video Card(s)	RTX 3090 Reference
Storage	Samsung 970 Evo 1Tb + Samsung 970 Evo 500Gb
Display(s)	Dell - 27" LED QHD G-SYNC x2
Case	Fractal Design Meshify-C
Audio Device(s)	on board
Power Supply	Seasonic Focus+ Gold 1000 Watt
Mouse	Logitech G502 spectrum
Keyboard	AZIO MGK-1 RGB (Kaith Blue)
Software	Win 10 Professional 64 bit
Benchmark Scores	the MLGeesiest

System Name	Bayou Phantom
Processor	Core i7-8700k 4.4Ghz @ 1.18v
Motherboard	ASRock Z390 Phantom Gaming 6
Cooling	All air: 2x140mm Fractal exhaust; 3x 140mm Cougar Intake; Enermax T40F Black CPU cooler
Memory	2x 16GB Mushkin Redline DDR-4 3200
Video Card(s)	EVGA RTX 2080 Ti Xc
Storage	1x 500 MX500 SSD; 2x 6TB WD Black; 1x 4TB WD Black; 1x400GB VelRptr; 1x 4TB WD Blue storage (eSATA)
Display(s)	HP 27q 27" IPS @ 2560 x 1440
Case	Fractal Design Define R4 Black w/Titanium front -windowed
Audio Device(s)	Soundblaster Z
Power Supply	Seasonic X-850
Mouse	Coolermaster Sentinel III (large palm grip!)
Keyboard	Logitech G610 Orion mechanical (Cherry Brown switches)
Software	Windows 10 Pro 64-bit (Start10 & Fences 3.0 installed)

System Name	Pioneer
Processor	Ryzen R9 7950X
Motherboard	GIGABYTE Aorus Elite X670 AX
Cooling	Noctua NH-D15 + A whole lotta Sunon and Corsair Maglev blower fans...
Memory	64GB (4x 16GB) G.Skill Flare X5 @ DDR5-6000 CL30
Video Card(s)	XFX RX 7900 XTX Speedster Merc 310
Storage	2x Crucial P5 Plus 2TB PCIe 4.0 NVMe SSDs
Display(s)	55" LG 55" B9 OLED 4K Display
Case	Thermaltake Core X31
Audio Device(s)	TOSLINK->Schiit Modi MB->Asgard 2 DAC Amp->AKG Pro K712 Headphones or HDMI->B9 OLED
Power Supply	FSP Hydro Ti Pro 850W
Mouse	Logitech G305 Lightspeed Wireless
Keyboard	WASD Code v3 with Cherry Green keyswitches + PBT DS keycaps
Software	Gentoo Linux x64

System Name	TheMailbox 5.0 / The Mailbox 4.5
Processor	RYZEN 1700X / Intel i7 2600k @ 4.2GHz
Motherboard	Fatal1ty X370 Gaming K4 / Gigabyte Z77X-UP5 TH Intel LGA 1155
Cooling	MasterLiquid PRO 280 / Scythe Katana 4
Memory	ADATA RGB 16GB DDR4 2666 16-16-16-39 / G.SKILL Sniper Series 16GB DDR3 1866: 9-9-9-24
Video Card(s)	MSI 1080 "Duke" with 8Gb of RAM. Boost Clock 1847 MHz / ASUS 780ti
Storage	256Gb M4 SSD / 128Gb Agelity 4 SSD , 500Gb WD (7200)
Display(s)	LG 29" Class 21:9 UltraWide® IPS LED Monitor 2560 x 1080 / Dell 27"
Case	Cooler Master MASTERBOX 5t / Cooler Master 922 HAF
Audio Device(s)	Realtek ALC1220 Audio Codec / SupremeFX X-Fi with Bose Companion 2 speakers.
Power Supply	Seasonic FOCUS Plus Series SSR-750PX 750W Platinum / SeaSonic X Series X650 Gold
Mouse	SteelSeries Sensei (RAW) / Logitech G5
Keyboard	Razer BlackWidow / Logitech (Unknown)
Software	Windows 10 Pro (64-bit)
Benchmark Scores	Benching is for bitches.

System Name	Rocinante
Processor	I9 14900KS
Motherboard	EVGA z690 Dark KINGPIN (modded BIOS)
Cooling	EK-AIO Elite 360 D-RGB
Memory	64GB Gskill Trident Z5 DDR5 6000 @6400
Video Card(s)	MSI SUPRIM Liquid X 4090
Storage	1x 500GB 980 Pro \| 1x 1TB 980 Pro \| 1x 8TB Corsair MP400
Display(s)	Odyssey OLED G9 G95SC
Case	Lian Li o11 Evo Dynamic White
Audio Device(s)	Moondrop S8's on Schiit Hel 2e
Power Supply	Bequiet! Power Pro 12 1500w
Mouse	Lamzu Atlantis mini (White)
Keyboard	Monsgeek M3 Lavender, Akko Crystal Blues
VR HMD	Quest 3
Software	Windows 11
Benchmark Scores	I dont have time for that.

Processor	Ryzen 5800X
Motherboard	Asus TUF-Gaming B550-Plus
Cooling	Noctua NH-U14S
Memory	32GB G.Skill Trident Z Neo F4-3600C16D-32GTZNC
Video Card(s)	Sapphire Radeon Rx 580 Nitro+ 8GB
Storage	HP EX950 512GB + Samsung 970 PRO 1TB
Display(s)	HP Z Display Z24i G2
Case	Fractal Design Define R6 Black
Audio Device(s)	Creative Sound Blaster AE-5
Power Supply	Seasonic PRIME Ultra 650W Gold
Mouse	Roccat Kone AIMO Remastered
Software	Windows 10 x64

System Name	AlderLake / Laptop
Processor	Intel i7 12700K P-Cores @ 5Ghz / Intel i3 7100U
Motherboard	Gigabyte Z690 Aorus Master / HP 83A3 (U3E1)
Cooling	Noctua NH-U12A 2 fans + Thermal Grizzly Kryonaut Extreme + 5 case fans / Fan
Memory	32GB DDR5 Corsair Dominator Platinum RGB 6000MHz CL36 / 8GB DDR4 HyperX CL13
Video Card(s)	MSI RTX 2070 Super Gaming X Trio / Intel HD620
Storage	Samsung 980 Pro 1TB + 970 Evo 500GB + 850 Pro 512GB + 860 Evo 1TB x2 / Samsung 256GB M.2 SSD
Display(s)	23.8" Dell S2417DG 165Hz G-Sync 1440p / 14" 1080p IPS Glossy
Case	Be quiet! Silent Base 600 - Window / HP Pavilion
Audio Device(s)	Panasonic SA-PMX94 / Realtek onboard + B&O speaker system / Harman Kardon Go + Play / Logitech G533
Power Supply	Seasonic Focus Plus Gold 750W / Powerbrick
Mouse	Logitech MX Anywhere 2 Laser wireless / Logitech M330 wireless
Keyboard	RAPOO E9270P Black 5GHz wireless / HP backlit
Software	Windows 11 / Windows 10
Benchmark Scores	Cinebench R23 (Single Core) 1936 @ stock Cinebench R23 (Multi Core) 23006 @ stock

System Name	Daily Driver/Part Time
Processor	Core i7-13700K/Ryzen R5-7600
Motherboard	ASUS ROG MAXIMUS Z790 APEX/Asrock B650 Pro RS Wi-Fi
Cooling	Corsair H150i RGB PRO XT AIO/Deep Cool LS-520 White
Memory	Patriot 2x16GB DDR5-7200/XPG Lancer Blade 2X16GB DDR-5-6000
Video Card(s)	MSI Ventus 3X OC RTX-4080 Super/Sapphire Radeon RX-7800XT
Storage	Samsung 980 Pro M.2 NVMe 2TB/KingSpec XG 7000 4TB M.2 NVMe/Crucial P5 Plus 2TB M.2 NVMe
Display(s)	Alienware AW3423DW
Case	Corsair 5000d AirFlow/Asus AP201 White
Audio Device(s)	AudioEngine D1 DAC/Onboard
Power Supply	Seasonic Prime Ultra 1K Watt/Seagotep 750W
Mouse	Corsair M65 RGB Elite
Keyboard	Adata XPG Summoner
Software	Win11 Pro 64
Benchmark Scores	Xbox Live Gamertag=jondonken

System Name	Windows 10 64-bit Core i7 6700
Processor	Intel Core i7 6700
Motherboard	Asus Z170M-PLUS
Cooling	Corsair AIO
Memory	2 x 8 GB Kingston DDR4 2666
Video Card(s)	Gigabyte NVIDIA GeForce GTX 1060 6GB
Storage	Western Digital Caviar Blue 1 TB, Seagate Baracuda 1 TB
Display(s)	Dell P2414H
Case	Corsair Carbide Air 540
Audio Device(s)	Realtek HD Audio
Power Supply	Corsair TX v2 650W
Mouse	Steelseries Sensei
Keyboard	CM Storm Quickfire Pro, Cherry MX Reds
Software	MS Windows 10 Pro 64-bit