#1 14 May 2017 23:45

Simon Sheppard
Super Administrator
Registered: 27 Aug 2005
Posts: 997
Website

WannaCrypt / WannaCry ransomware

Offline

#2 15 May 2017 17:04

einstein1969
Member
From: Italy
Registered: 29 Dec 2013
Posts: 25

Re: WannaCrypt / WannaCry ransomware

Thanks for the links, Simon. I was not infected but I'd like to know the steps needed to remove the ransomware.

Offline

#3 15 May 2017 20:47

Simon Sheppard
Super Administrator
Registered: 27 Aug 2005
Posts: 997
Website

Re: WannaCrypt / WannaCry ransomware

I havent had to deal with an infection yet

Apart from the obvious 'flatten everything and restore backups', heres a few more links that should help

BleepingComputer's Help & Support
Bleeping computer - News

No more ransom
https://www.nomoreransom.org/crypto-sheriff.php

Decryption Tools  - 'No more ransom'  don't have a tool for WannaCrypt yet, but imagine they are working on it.

Offline

#4 16 May 2017 20:52

msalman
Member
Registered: 02 Nov 2012
Posts: 9

Re: WannaCrypt / WannaCry ransomware

just kill service

sc stop mrxsmb10
sc stop mrxsmb20
sc.exe config lanmanworkstation depend= bowser/mrxsmb20/nsi
sc.exe config mrxsmb10 start= disabled
sc.exe config lanmanworkstation depend= bowser/mrxsmb10/nsi
sc.exe config mrxsmb20 start= disabled
sc delete mrxsmb10
sc delete mrxsmb20

Offline

Board footer

Powered by FluxBB