Tiv thaiv WannaCry: Yuav ua li cas restore los yog tiv thaiv koj lub computer los ntawm WannaCry ransomwa

Nyob rau hauv hnub no lub fast-paced ntiaj teb no, peb cia siab rau technology nyob rau hauv ntau txoj kev tshaj ib tug yuav xav txog tej yam. Txawm tias peb kev ruaj ntseg kev cai tau raug kho kom zoo nyob rau hauv lub dhau los lawm, muaj ntau ntau ntawm tus kab mob no thiab malware tawm tsam hais tias kom compromising nrog peb kev ruaj ntseg ..

Tsis ntev los no, WannaCrypt Ransomware (los yog WannaCry tus kab mob no) yog ua lub ntiaj teb no muaj nuj nqis rau rau txhiab tus computers lub ntiaj teb no tshaj. Lub malware nrhiav tau lub May 12, 2017 thiab nyob rau hauv ib tug teeb meem ntawm ib tug ob peb hnub, nws tau tsim lub ntiaj teb no chaos. Lawv hais tias nws yog zoo dua rau muaj kev ruaj ntseg tshaj thov txim. Cia li zoo li phav phav ntawm lwm lub, koj muaj peev xwm kuj yuav cuam tshuam los ntawm WannaCrypt. Yog li ntawd, nws yog zoo dua yuav rov qab tau koj cov ntaub ntawv ua ntej los tiv thaiv koj tseem ceeb heev ntaub ntawv los ntawm qhov no sib tham isthawmnev hais nres. Peb tau txais tag nrho nws them nyob rau hauv no ncej.

• Part 1: Yuav ua li cas yog WannaCry
• Part 2: Tshem tawm cov Wannacry ransomware
• Part 3: Rov qab encrypted ntaub ntawv
• Part 4: Tswv yim rau txoj kev ruaj ntseg ntawm koj lub computer thiab mobile tes
• Part 5: Yog xav paub ntxiv txog WannaCry ransomware

Part 1 Yuav ua li cas yog WannaCry Ransomware?

Khoos phib tawj tus kab mob no yog ib qho ntawm feem dreadful yam rau peb kev sib tham isthawmnev kev ruaj ntseg. Tsis ntev los no malware, uas mus los ntawm lub npe ntawm WannaCry sib tham isthawmnev hais nres twb cuam tshuam ntau tshaj li 200 txhiab systems nyob rau hauv ib ncig ntawm 150 lub teb chaws hauv lub ntiaj teb lawm. Qhov no yog ib qho ntawm feem loj heev thiab dav kis sib tham isthawmnev hais tawm tsam ntawm tsis ntev los no lub sij hawm.

Txij li thaum nyob rau hauv ib tug teeb meem ntawm ib tug ob peb hnub, nws tau cuam tshuam xws li ib tug loj pas dej ua ke ntawm pab kiag li lawm, nws yog twb tau piav raws li unprecedented nyob rau hauv cov xwm los ntawm Europol. Raws li nws yog ib tug Trojan dropper, nws yuav kis tus kab mob mus rau lwm cov systems raws li zoo.

Nws twb xub nrhiav tau lub May 12, 2017, ntawm ib qho kev email Symptoms . Qhov tseeb tiag mas, tus kab mob no gains nws nkag tau mus rau koj lub computer los ntawm ib tug email Symptoms thiab yuav kis tau los ntawm koj LAN nyob rau hauv tsis muaj sij hawm. Nws kuj exploits cov SMB ruaj khov rau ib tug system lub hard disk. Tsis yog hais tias, nws muaj peev xwm txawm kis mus rau yuav luag txhua lub computer ntawm qhov internet (thaum kev cob cog rua rau tib lub network).

Los ntawm jpeg rau cov nqaij nyoos thiab thawv rau txt, nws muaj feem xyuam rau yuav luag txhua txhua cov ntaub ntawv extension, corrupting tag nrho koj cov system nyob rau hauv ib tug ob peb lub vib nas this. Yog li ntawd, yog tias koj lub cev yog tseem muaj kev nyab xeeb, koj yuav tsum tau sim kom tiv thaiv tau nws tam sim ntawd siv txheem kev ruaj ntseg ntsuas.

Part 2 Tshem tawm cov Wannacry ransomware

Yog hais tias koj xav kom lub kev ruaj ntseg nyob rau hauv koj lub cev dua, ces koj tau txais los rhuav tshem ntawm lub WannaCry Ransomware thawj. Yog hais tias tseem tsis muaj neeg saib, nws yuav maj mam tsiv mus nyob rau tag nrho koj cov cia thiab muaj feem xyuam rau yuav luag txhua yam ntaub ntawv uas koj muaj. Yog li ntawd, koj yuav tsum ua huab ntsuas thiab hais tias heev sai sai li koj ua tau kom tshem tawm cov malware los ntawm lub system. Ua raws li cov lus qhia no thiab kom paub tseeb tias koj tau manually muab tshem tawm nws los ntawm koj lub cev.

Kauj ruam 1. Siv nplaub tshev xaiv los mus ua kom txhua txhua cov ntaub ntawv thiab sis pom

Txij li thaum lub malware yuav tsis pom thaum xub thawj, koj yuav tsum xyuas kom meej tias tsis muaj cov ntaub ntawv yog muab zais rau koj lub cev. Ua li no, koj yuav tsum mus saib qhov "nplaub tshev xaiv" on koj lub cev thiab ua rau tag nrho cov thaum cov ntaub ntawv pom.

Koj yuav tau txais cov nplaub tshev Options mus saib Control Vaj Huam Sib Luag> Tsos & Personalization> nplaub tshev Options. Ntawm no, nyob rau hauv lub Saib tab, koj yuav tau mus xyuas cov kev xaiv ntawm "Qhia thaum cov ntaub ntawv, folders, thiab drives". Tam sim no, tsuas siv cov chaw yuav ua rau tus malware pom.

Kauj ruam 2. Reboot lub PC nyob rau hauv Safe hom

Great! Tam sim no thaum koj tau ua tiav thawj kauj ruam, koj yuav tau pib koj lub qhov rais system nyob rau hauv lub Safe hom. Ua li no, cias pib dua koj lub cev thiab raws li nws reboots, nias lub F8 tseem ceeb nyob rau hauv cov Team sib of 1 thib ob ib ob peb lub sij hawm.

Qhov no yuav muab lub siab heev khau raj xaiv rau koj es tsis txhob ntawm tsuas restarting lub system li ib txwm txoj kev. Siv koj tus xub daws, xaiv "Zoo hom" thiab nias Sau tig rau koj lub cev nyob rau hauv kev ruaj ntseg hom.

Kauj Ruam 3. Sau Task Manager thiab muaj cai tag nrho tej yam txawv dab

Tom qab nkag mus rau koj lub cev nyob rau hauv lub zoo hom, uas koj tau txais pib lub Task Manager. Koj yuav tau ua nws los ntawm nias Ctrl + Hloov + ESC tuav nyob rau tib lub sij hawm.

Koj yuav tau txais ib tug neeg ua hauj lwm saib xyuas qhov rais zoo li no. Los ntawm no, koj yuav tsum manually xyuas tej yam txawv txawv txoj kev uas yog khiav ntawm koj lub cev. Tom qab tshuaj ntsuam nws, tsuas muaj cai-nias rau ntawm nws thiab xaiv "End txheej txheem" ​​cai nws.

Tsis txhob caiv koj tus kheej thiab xaiv yuav luag txhua txhua hom ntawm tej yam txawv cov txheej txheem uas tej zaum koj yuav nrhiav tau kom tshem tau ntawm lub malware.

Ceeb toom: Koj muaj peev xwm mus saib tag nrho cov xaiv ntawm ransomware txheej txheem nyob ntawm no: https://id-ransomware.malwarehunterteam.com/.

Kauj ruam 4. Tiv thaiv lub ransomware los ntawm booting

Tam sim no, nyob rau hauv thiaj li yuav tiv thaiv kom txhob Ransomware los ntawm booting, koj yuav tsum ua kom paub tseeb tias koj lub cev nyob rau hauv huv si nkaus. Ua li nws, koj yuav tsum tshem tawm cov nws siv msconfig . Cia li nias qhov rais + R lag luam nyob rau tib lub sij hawm los yog qhib lub "Khiav" sai li sai tau manually. Ntawm no, hom "msconfig" thiab nias nkag mus rau.

Qhov no yuav qhib lwm qhov rais rau System Configuration. Kom paub tseeb tias koj muaj ib tug tus booting lag luam, koj yuav tsum xyuas kom meej tias cov malware tau deleted. Mus rau lub Startup tab thiab uncheck tag nrho cov nkag uas koj xav hais tias yog los ntawm ib tug tsis paub chaw tsim tshuaj paus.

Tom qab ua ntawv thov cov kev hloov no, koj yuav tau pib dua koj lub cev nyob rau hauv lub qub txoj kev. Qhov no yuav xyuas kom meej tias Ransomware tau raug tshem tawm nkaus los ntawm koj lub cev. Tam sim no, koj muaj peev xwm mus thiab ua kom muab koj cov ntaub ntawv rov qab.

Part 3 decrypt lub Ransomware los yog rov qab rau hauv lub encrypted ntaub ntawv los ntawm WannaCry

Tom qab tshem tawm tag nrho cov txawv txawv dab, koj yuav tau ua ib qho kev rau siab mus rau decrypt koj cov ntaub ntawv. Koj yuav tau sim ua rau nws nrog tej yam kev ua encryption cuab tam, tab sis qhov uas yuav muaj tau fruitful tau yog heev bleak.

Txij li thaum WannaCry Ransomware siv cov RSA + AES encryption txoj kev los encrypt koj cov ntaub ntawv cov ntaub ntawv, nws yog heev nyuaj rau decrypt lawv, txawm nrog kev pab los ntawm ib tug them nyiaj lub cuab tam.

Cuaj kaum, koj yuav tsum tsis txhob tau chim li sai sai. WannaCry tsis ncaj qha mus encrypt lub sij ntaub ntawv. Xwb, nws thawj ua ib tug duab ntxoov ntxoo daim qauv ntawm cov ntaub ntawv thiab encrypts nws daim ntawv. Tus thawj cov ntaub ntawv yog deleted ntawm koj lub cev. Txawm koj yuav tsis decrypt lub theej cov ntaub ntawv, koj tseem yuav tau txais koj deleted cov ntaub ntawv rov qab los ntawm kev noj kev pab los ntawm tej kev ruaj ntseg cov ntaub ntawv rov qab software.

Yog hais tias koj xav kom tau koj muas thaum chiv thawj deleted cov ntaub ntawv, ces koj tsuas siv tau ib tug nkag ntaub ntawv rov qab daim ntawv thov. Muaj ntau ntau cov ntaub ntawv rov qab cuab yeej muaj, tiam sis tsuas yog ib tug puv tes ntawm lawv muaj peev xwm qhia rau koj muab koj cov ntaub ntawv nyob rau hauv ib tug uas nws kim heev yam. Peb pom zoo kom siv Wondershare ntaub ntawv rov qab software yuav tau txais koj deleted cov ntaub ntawv rov qab.

Nws yog ib tug uas muaj feem yuav-dawb thiab them nqi-zoo lub cuab tam uas sau nyob rau yuav luag txhua txhua version ntawm qhov rais. Yog hais tias koj lub cev muaj twb nyuam qhuav cuam tshuam los ntawm lub WannaCry Ransomware, ces koj yuav restore koj deleted ntaub ntawv uas siv cov ntaub ntawv rov qab lub cuab tam. Mus ceev koj siv nws, qhov ntau zoo koj yuav tau txais koj cov ntaub ntawv rov qab. Ua raws li cov yooj yim cov lus qhia khiav lub cuab tam.

Kauj ruam 1. Tua tawm cov ntaub ntawv rov qab cuab tam

Pib los ntawm kev daus Wondershare ntaub ntawv rov qab lub cuab tam thiab nruab nws nyob rau koj lub cev. Tua tawm nws rau koj lub cev thiab xaiv los cov ntaub ntawv los ntawm koj hard disk. Koj yuav raug hais kom xaiv qhov zoo ntawm cov ntaub ntawv uas koj xav kom muab. Txij li thaum WannaCry Ransomware muaj feem xyuam rau yuav luag txhua yam ntawm cov ntaub ntawv, xaiv "Tag nrho cov ntaub ntawv hom" thiab nias rau ntawm lub "Tom ntej" khawm.

Kauj ruam 2. Xaiv qhov chaw uas koj cov ntaub ntawv tau raug encrypted los ntawm Wannacry

Koj yuav raug hais kom xaiv qhov chaw rau luam theej duab rau deleted cov ntaub ntawv. Koj muaj peev xwm tsuas xaiv cov chaw, cov cuam tshuam tsav, los yog lub computer. Txij li thaum Ransomware muaj feem xyuam rau lub tag nrho qhov system, koj yuav tsum xaiv tag nrho computer thiab nias rau ntawm lub "Start" khawm kom pib rov qab txheej txheem.

Kauj Ruam 3. Restore koj cov ntaub ntawv los ntawm Wannacry encryption

Tos ib pliag li daim ntawv thov yuav rov qab tau cov deleted ntaub ntawv los ntawm koj lub cev. Yog hais tias koj cov ntaub ntawv tau raug nyuam qhuav cuam tshuam los ntawm lub malware, ces rov qab lub cuab tam yuav tsum tau los muaj ntau yam pauv nyiaj ntawm cov ntaub ntawv. Tom qab ua kom tiav rov qab tus txheej txheem, koj yuav tau txais ib qho screen zoo li no. Koj cov ntaub ntawv yuav tsum segregated raws li nws qhov chaw nyob. Yog xav tau nws rov qab, tsuas xaiv nws thiab nias rau ntawm lub "Rov qab" khawm.

Qhov no yuav qhia rau koj los koj cov ntaub ntawv. Txij li thaum koj twb tau tshem ntawm cov malware, koj cov ntaub ntawv yuav tsis tau cuam tshuam los ntawm nws dua. Tab sis, koj lub cev yuav tsum tau raug mus rau lub tib yam (los yog tej nres) nyob rau hauv lub neej yav tom ntej zoo li no. Kom paub tseeb tias koj tsis muaj tib txoj kev, kawm kom yuam kev ntsuas nyob rau hauv lub tom ntej no seem.

Part 4 Tswv Yim rau Kev ruaj ntseg ntawm koj lub computer thiab mobile tes

Nrog lub nce qib nyob rau hauv technology, lub hnub nyoog-laus thiab khiav ntawm lub zeb ruaj ntseg ntsuas tau zoo nkauj futile. Yog hais tias koj xav kom tiv thaiv koj computers thiab txawb tes, ces koj yuav tsum tau tech-miv nyob rau hauv cov xwm. Yog hais tias koj tsis xav kom koj cov ntaub ntawv yuav muaj cuam tshuam los ntawm ib tug kab mob nres li WannaCry Ransomware, ces nws yog ib qho tseem ceeb mus tiv thaiv koj pab kiag li lawm. Ua raws li cov kws muaj txuj tswv yim nyob rau hauv thiaj li yuav kom koj cov ntaub ntawv kev nyab xeeb.

1. Yuav tsum backup koj cov ntaub ntawv

WannaCry Ransomware yog cia li ib tug piv txwv ntawm yuav ua li cas dreadful computer malware yuav ua tau. Yog li ntawd, nws yog ib txwm pom zoo kom ib tug thaub qab ntawm koj cov ntaub ntawv. Koj yuav yog tig mus rau ntawm automatic backup kev xaiv rau koj ntaus ntawv los yog tsuas yog muab ib phau ntawv thaub qab ntawm koj cov ntaub ntawv nyob rau hauv ib tug raws sijhawm.

Koj muaj peev xwm siv backup software xws li Wondershare TunesGo mus coj ib tug kev thaub qab ntawm koj cov ntaub ntawv. Nrog nws, koj ua tau backup koj lub PC los yog koj txawb tes nyob rau hauv tsis muaj sij hawm. Nws yog ib tug ua kom tiav lub xov tooj tswj lub cuab tam uas yuav pab tau koj kom koj cov ntaub ntawv tiv thaiv. Nws kuj los nrog pw kom ntau ntau lwm nta zoo li uas yuav ua rau koj lub neej ib tug tag nrho yooj yim heev.

2. Nyob twj ywm mus txog hnub

Peb txhua tus yeej paub hais tias tsis ntev los no WannaCry Ransomware muaj peev xwm muaj kev cuam tshuam tag nrho cov qhov rais tshuab uas raug sab laug un-patched. Nco ntsoov tias koj pab kiag li lawm yuav khiav rau tshiab software thiab hais tias nws tsis muaj kev ruaj khov uas yuav tsum tau exploited los ntawm ib tug nres.

3. Tau anti-virus software

Needless hais, koj yuav tsum nruab txhim khu kev qha thiab ruaj ntseg anti-virus software rau koj lub cev. Tsis yog koj lub PC, koj yuav tsum tau nruab anti-virus software rau koj txawb tes zoo li. Tsis tas li ntawd, kom muab kho dua koj anti-virus kom koj lub cev muaj kev ruaj ntseg.

4. Tau ntaub ntawv rov qab software

Nyob rau hauv cov ntaub ntawv yog tias koj lub cev tseem tau cuam tshuam los ntawm ib tug malware, ces koj yuav tsum tau muaj ib tug ntaub ntawv rov qab software twb ntsia. Qhov no yuav tuaj ua ke rau koj heev heev lub sij hawm ntawd. Tom qab tshem tawm cov malware los ntawm koj lub cev, koj muaj peev xwm tsuas khiav ib tug ntaub ntawv rov qab daim ntawv thov nyob rau hauv thiaj li yuav muab lub cov ntaub ntawv.

Wondershare ntaub ntawv rov qab software yog ib tug tsis tshua txhim khu kev qha daim ntawv thov hais tias txhua txhua lub qhov rais thiab Mac neeg siv yuav tsum tau ntsia rau lawv system. Koj yuav tsum tau muaj cov ntaub ntawv rov qab software los ntawm dr.fone mus muab kom tau cov deleted ntaub ntawv los ntawm koj cov xov tooj txawb li zoo.

Peb cia siab hais tias tom qab yuav los ntawm no kev ncej, koj yuav tau kom koj cov ntaub ntawv muaj kev ruaj ntseg los ntawm WannaCry Ransomware. Ua raws li cov saum toj no-teev tseg stepwise nyeem nyob rau hauv thiaj li yuav tshem tawm cov malware los ntawm lub system thiab tom qab retrieving koj deleted cov ntaub ntawv raws li tau zoo. Tsis tas li ntawd, kom paub tseeb tias koj ua raws li tag nrho cov tseem ceeb ntsuas kom koj cov ntaub ntawv tiv thaiv los ntawm tej kev sib tham isthawmnev nres.

Yog hais tias koj muaj lus nug txog WannaCry Ransomware los yog tsis muaj peev xwm mus muab kom tau koj cov ntaub ntawv, ces xav tias dawb qhia rau peb paub nyob rau hauv cov lus hauv qab no. Peb yuav muaj tseeb tau txais rov qab rau koj, cia koj cia koj lub cev kev tiv thaiv thiab kev ruaj ntseg los ntawm lub malware.

Part 5 xav paub ntxiv txog WannaCry Ransomware: nws keeb kwm thiab yuav ua li cas nws ua hauj lwm?

Muaj yog tsis muaj lwm cov ntaub ntawv hais txog lub hauv paus chiv keeb ntawm WannaCry li ntawm tam sim no. Tab sis, nws yog muaj npe raws li WannaCry 0r 2.0, uas yog ua sawv daws ntseeg hais tias nws yog ib tug thib ob version ntawm cov malware. Nws cov thawj lub npe hu ua li Ransomware WeCry (thiab demanded 0.1 Bitcoin li nqe txhiv). Nws yog paub tseeb hais tias hais tias cov attackers siv Nyob Mus Ib Txhis Blue (Microsoft lub qhov rais siv), uas yog Ameslikas tsim los ntawm NSA. Cov cuab yeej tau leaked los ntawm ib pab pawg neeg, Duab ntxoov ntxoo Brokers .

Tam sim no, ntau ntawm cov koom haum tau cuam tshuam los ntawm no lub ntiaj teb kev sib tham isthawmnev nres. Nws muaj xws li ntau ntawm cov tsev kho mob nyob rau hauv lub UK, Spanish telecommunication tuam txhab Telefónica , thiab txawm lub logistics department ntawm FedEx. Qhov no tsuas depicts yuav ua li cas haib cuag ntawm WannaCry Ransomware yog.

Raws li tau teev, nws exploits cov kev ruaj khov ntawm SMB (neeg rau zaub mov Message Thaiv) nyob rau hauv lub qhov rais tshuab. Qhov no yog ua los ntawm cov kev siv, Nyob Mus Ib Txhis Blue uas tau raug neeg nyiag lawm los NSA. Raws li taug xaiv, Nyob Mus Ib Txhis Blue nws yog ib tug hacking riam phom tsim los ntawm NSA mus nce nkag rau Microsoft lub qhov rais tshuab.

WannaCry lub hom phaj lub tshuab uas yog tsis patched rau MS-17-010 (uas twb tso tawm los ntawm Microsoft nyob rau hauv lub peb hlis ntuj 2017). Yog hais tias koj lub cev yog tseem un-patched, ces koj lam tau lam ua tus nres. Tom qab txhaj, koj cov ntaub ntawv yuav tsum nyom thiab koj yuav tau txais ib qho screen zoo li no. Nws yuav tso ib cov lus hais tias nyob rau hauv thiaj li yuav rov qab tau koj cov ntaub ntawv, koj yuav tsum mus rau cov hloov Bitcoins rau qhov muab tus account.