Emergency notice! 1 stroke to prevent new ransomware virus

Yesterday, the National Internet Emergency Response Center issued a warning for a new ransomware virus. The full text was reprinted in this morning's "News Tea and Rice". Children's shoes that haven't been read, Xiaobian helped everyone put the official proposed protective strategy on the following, and did not do WannaCry's counterpart to the protective work.

1. Do not click on unclear attachments, especially rtf, doc, etc. files.

2. If there is a machine on the intranet that uses the same account and password, please change the password as soon as possible. If the computer is not turned on, make sure that the password is changed and the patch installation is complete before starting the operation.

3. Update Operating System Patch (MS)

Https://technet.microsoft.com/en-us/library/security/ms17-010.aspx

4. Update Patch for Microsoft Office/WordPad Remote Code Execution Vulnerability (CVE -2017-0199)

Https://technet.microsoft.com/en-us/office/mt465751.aspx

5. Disabling WMI Services

Https://zhidao.baidu.com/question/91063891.html?qq-pf-to=pcqq.c2c

Is it some trouble? Well, these detailed tasks are not only used to correspond to the new virus called Petya, but also have some effect in protecting against other viruses of the same type. If you have installed the corresponding patch before, and now is just to protect Petya, there is a better way to make a pseudo virus location file.

Everyone first go to C:\Windows, copy a notepad.exe to the desktop (or anywhere else, as long as you can find).

Then go to "Control Panel - File Explorer Options" and remove the check "Hide File Type Extensions."

Then rename "notepad.exe" copied to the desktop to "perfc" (without the suffix name), then right-click it, and in the "Properties" item, set it to "Read-only" file.

Finally, just put this newly created file and return it to C:\Windows and you're done. Why do you do this? The reason is that after analysis by security technicians, the new ransomware first searches for a local file (that is, the one we made above) before it is built into the computer. If it finds that the file already exists, then it will exit the encryption and will not Any threat to us. However, if the virus maker changes the virus later, the victim will still suffer, and it is recommended that you still have to do a good security protection.