Petya Ransomware: Yuav ua li cas los tiv thaiv koj lub qhov rais Computer los ntawm cov Petya Ransomware

Ib tug variation ntawm lub Petya ransomware twb launched raws li ib tug ntiaj teb no sib tham isthawmnev hais nres rau ntawm lub rau hli ntuj 27th, 2017. Nws pib rau tuam txhab uas muag nyob rau hauv Ukraine thiab tau qhia kom muaj tshwm sim los mob nyob rau hauv lwm lub teb chaws xws li lub tebchaws United States, cov UK, Poland, Ltalis, Lub teb chaws Yelemees thiab Fabkis . Qhov no variant ntawm Petya muaj ib tug txawv hom ntawm cov lag luam dua lub Petya ransomware hais tias ua ntej ntaus nyob rau hauv lub peb hlis ntuj thiab lub Tsib Hlis xyoo tas los. Nws lub hom phaj ib tug ruaj khov ntawm tus raws tu qauv npe hu neeg rau zaub mov Message Thaiv ntawm lub qhov rais ua ib, EternalBlue es tsis txhob ntawm propagating ntawm tus kab mob PDF ntaub ntawv raws li yog cov ntaub ntawv nyob rau hauv thawj zaug version ntawm Petya. Vim hais tias ntawm cov differing hom kev lag luam, cov kws txawj muaj ib qhov no version ntawm lub ransomware li NotPetya.

• Part 1: Yuav ua li cas yog Petya Ransomware?
• Part 2: Yuav ua li cas los tiv thaiv koj lub qhov rais Computer los ntawm noj li Petya
• Part 3: Yuav ua li cas Rov qab ntaub ntawv deleted los ntawm kab mob Attack

Part 1: Yuav ua li cas yog Petya Ransomware?

Petya yog ib lub npe muab rau ib tug malware uas ua raws li ib tug ransomware thiab demands cov nyiaj them ntawm tus nqi nyob rau hauv Bitcoin. Nws kis computers uas khiav lub qhov rais Operating System thiab yog feem ntau propagated los ntawm ib tug payload uas yog disguised nyob rau hauv daim ntawv ntawm ib tug PDF ntaub ntawv xa mus rau lub computer raws li ib tug email Symptoms. Raws li ib tug tshwm sim ntawm no malware, tag nrho cov ntaub ntawv rau lub mob computer los ua tsis cuag raws li lawv yog encrypted thiab tsis tau accessed tsis muaj tus encryption qhov tseem ceeb. Qhov no ransomware twb xub ces yuav tsum nyob rau hauv lub peb hlis ntuj 2016 thiab ntau lwm versions ntawm nws tau pom nyob rau hauv Tej zaum 2016 thiab feem ntau tsis ntev los no nyob rau hauv Lub rau hli ntuj xyoo no. Petya yog kev vam meej nyob rau hauv kis ib tug loj tus naj npawb ntawm tuam txhab uas muag nyob rau hauv Ukraine thiab tswj kom muaj kev cuam tshuam heev heev tuam txhab uas muag thoob plaws lub ntiaj teb no.

Petya ntaus ib tug resemblance mus rau lwm ransomware uas ntaus nyob rau hauv Tej zaum ntawm 2017, WannaCry. Cov kev zoo sib thooj ntawm ob malware lus dag nyob rau hauv lub fact tias tag nrho ob qho ntawm lawv demanded nqe txhiv nyiaj them nyob rau hauv daim ntawv ntawm cov Bitcoin. Ntxiv mus, lub NotPetya version thiab WannaCry ob tsom EternalBlue kev ruaj khov ntawm lub qhov rais Operating System. Txawm tias qhov no ob ransomware yog heev uas zoo sib xws, lawv muaj ib co sib txawv zoo li. Piv txwv li, lub WannaCry sib tham isthawmnev hais nres yog tiag tiag ntiaj teb no nyob rau hauv qhov thiab cov computers thoob plaws lub ntiaj teb no thaum Petya twb tag rau ib tug puv tes ntawm European lub teb chaws thiab hauv lub tebchaws United States nyob zoo. Nyob rau hauv tas li ntawd rau qhov no, Petya yog xam los ntawm kev ruaj ntseg cov kws txawj raws li ib tug ntau npaum li cas txaus ntshai hom ransomware tshaj WannaCry.

Part 2: Yuav ua li cas los tiv thaiv koj lub qhov rais Computer los ntawm noj li Petya

Nyob rau hauv lub wake ntawm tus nres li Petya, nws tau ua nce tseem ceeb heev rau computer cov neeg siv kom paub tias dab tsi uas lawv ua tau los tiv thaiv lawv lub qhov rais-khiav PCs. Cov nram qab no yog ib co ntawm cov kev ntsuas uas koj muaj peev xwm coj nyob rau hauv thiaj li yuav kom koj lub computer muaj kev ruaj ntseg los ntawm kev sib tham isthawmnev tawm tsam zoo li Petya.

1. Rov qab mus rau koj lub computer

Thaub li cov ntaub ntawv nyob rau hauv koj lub computer yog ib tug ntawm qhov zoo tshaj plaws txoj kev uas yuav xyuas kom meej tias koj tsis cuam tshuam heev npaum li cas yog tias ib tug kev sib tham isthawmnev nres xws li Petya kis koj lub cev. Nrog koj cov ntaub ntawv phwj rau ib tug sab nraud hard disk los yog huab, koj yuav muaj tsis muaj teeb meem los xij nyob rau hauv tus txheejtxheem cov ntaub ntawv uas yog tam sim no muab tsis cuag rau koj lub computer system ua tsaug rau cov encryption tshwm sim los ntawm lub ransomware. Txawm li cas los, nws yog ib qho tseem ceeb uas koj backup koj lub computer rau ib tug tsis tu ncua li ntawd qhov tseeb versions ntawm tag nrho cov koj cov ntaub ntawv yog npaj meej muaj nyob rau koj.

2. Nruab tiv thaiv cov kev pab cuam

Lwm zoo txhais tau tias ntawm stalling qhov kev kawm ntawm ib tug malware thiab tiv thaiv koj lub computer los ntawm nws cov muaj feem xyuam rau yog installation ntawm kev tiv thaiv kev pab cuam. Cov kev pab cuam muaj xws li anti-malware software, anti-virus kev pab cuam thiab firewalls. Tej kev tiv thaiv software yuav pab tau nyob rau hauv qhia cov kev hem thawj nyiag ua los ntawm malware tam sim ntawd thiab kuj tiv thaiv cov ntaub ntawv khaws tseg rau koj lub computer los ntawm tau txais encrypted los ntawm cov ransomware. Nws tseem yog tsim nyog los lossi hloov cov kev pab cuam dhau lawm ces hais tias koj muaj tshaj plaws li-rau-hnub tiv thaiv los ntawm malware ntawm tag nrho cov hom.

3. Download thaj ua rau thaj

Nyob rau hauv lub aftermath ntawm kev sib tham isthawmnev tawm tsam xws li WannaCry thiab Petya, Microsoft tso tawm thaj ua rau thaj uas muaj kev tiv thaiv qhov rais neeg siv los ntawm qhov EternalBlue ruaj khov hais tias cov ransomware tsom. Cov thaj ua rau thaj yuav pab tau koj los ntawm kev ua kom koj lub computer muaj kev ruaj ntseg los ntawm cov malware tawm tsam. Feem ntau ntawm cov qhov rai-khiav computers uas yeej yuav kho tau pom no thaj hloov tshiab los ntawm tam sim no. Yog hais tias koj tsis tau pom no thaj li ntawm tsis tau, koj muaj peev xwm download tau nws los ntawm Microsoft lub website sai li sai tau.

4. Tsis txhob nias rau tej yam txawv

Feem ntau ntawm cov ransomware li Petya thiab WannaCry propagate los ntawm emails nrog tej yam txawv attachments. Yog li, nws yog ib tug zoo lub tswv yim tsis tau nyem rau ntawm tej Symptoms uas koj nrhiav tau txawm lub slightest ntsis tej yam txawv. Muaj ntau ntau yam liab chij txuam nrog xws li emails thiab koj cia li yuav tsum tau attentive txaus qha lawv los ntawm emails xa los ntawm qhabnias qhov chaw. Nyob rau hauv tas li ntawd mus no, koj yuav tsum caiv txhob mus saib cov websites uas yog lub npe hu rau tej yam txawv los yog yam txhaum cai raws li zoo txij li thaum lawv yuav nteg qe ua rau malware li WannaCry thiab Petya.

5. Tiv thaiv koj tus kheej thaum uas siv cov pej xeem Wi-Fi

Ransomware li Petya kis los ntawm ib lub computer mus rau lwm siv lawv qhia network. Siv ib tug pej xeem Wi-Fi txo nws hwj koj nyob rau hauv ib tug zoo li txoj hauj lwm. Nyob rau hauv xws zaus, koj lub computer yog pom mus rau txhua leej txhua tus siv tib lub Wi-nkaus thiab yog li no nyob rau hauv kev txaus ntshai ntawm tau txais kab mob los ntawm malware. Yuav kom tiv thaiv koj lub computer thaum siv ib tug pej xeem Wi-nkaus, nws yog nyob rau hauv koj qhov zoo tshaj plaws kev txaus siab los ua kev siv ntawm ib tug VPN los yog ib tug Virtual Private Network. Thaum nws yuav tsis nres ib tug malware, ib tug VPN yuav pab tau los ntawm nkaum koj lub computer los ntawm lwm leej lwm tus rau cov pej xeem network, li no tiv thaiv koj los ntawm kev rov los ransomware.

Part 3: Yuav ua li cas Rov qab ntaub ntawv deleted los ntawm kab mob Attack

Tus kab mob no tawm tsam yuav ua rau cov ntaub ntawv nyob rau hauv koj lub computer tsis cuag los ntawm encrypting lawv thiab tej zaum yuav txawm rho tawm lawv huv tibsi. Yog hais tias koj cov ntaub ntawv deleted los ntawm tus kab mob no yuav nres, koj yuav siv tau ib tug nkag ntaub ntawv rov qab software yuav pab kom koj rov qab Ameslikas deleted cov ntaub ntawv. Peb mas pom zoo Wondershare ntaub ntawv rov qab software yuav pab kom koj tau txais koj cov ntaub ntawv rov qab, qhov no rov qab software yog muaj nyob rau ib tug dawb download tau thiab yuav siv tau rau recovering cov ntaub ntawv nyob rau hauv ob qho tib si lub qhov rais-khiav PCs raws li Macs khiav Mac OSX. Ua raws li cov tom ntej no tej yam yooj yim cov kauj ruam ua deleted cov ntaub ntawv rov qab.

Kauj ruam 1: Xaiv cov ntaub ntawv yam koj xav rov qab

Yuav ua li cas hom ntawm cov ntaub ntawv deleted los ntawm tus kab mob no yuav nres, koj yuav xaiv tau cov kev ntaub ntawv xws yees duab, video, suab paj nruag, Email, daim ntawv thiab lwm tus neeg. Los yog koj muaj peev xwm xaiv qhov kev xaiv "Tag nrho cov ntaub ntawv hom" pib.

Kauj ruam 2: Xaiv qhov chaw rau PP cov ntaub ntawv

Xyuas kom tseeb tias koj nco txog qhov twg koj cov ntaub ntawv deleted los ntawm tus kab mob no nres. Koj yuav tsum mus mus xaiv cov kev xaiv "Whole Computer" thiab nias rau ntawm lub "Start" khawm kom pib PP deleted cov ntaub ntawv.

Kauj ruam 3: Rov qab deleted cov ntaub ntawv los ntawm tus kab mob no nres

Tom qab sib sib zog nqus PP, cov ntaub ntawv rov qab daim ntawv thov yuav rov qab tau cov deleted ntaub ntawv los ntawm tus kab mob no nres. Koj ua tau tej yam yooj yim previewe lub zoo tu qab tso cov ntaub ntawv, thiab nias rau ntawm lub "Rov qab" khawm kom tau koj cov ntaub ntawv rov qab.

Ransomware li Petya yuav ua pov thawj yuav heev ua rau lub computer system. Lawv yuav encrypt los yog rho tawm ib qho tseem ceeb cov ntaub ntawv thiab thov nqe txhiv kom tau rov qab nkag tau mus rau cov ntaub ntawv. Los ntawm kev noj cov muaj kev ruaj ntseg ntsuas, koj muaj peev xwm tiv thaiv koj cov qhov rais PC los ntawm malware tawm tsam zoo li Petya. Txawm li cas los, cov ntaub ntawv rov qab software yuav lav tsis tau tias tej teeb meem no yuav ua tau 100% rov qab. Khaws koj cov ntaub ntawv kev nyab xeeb koj yuav tsum mus rau backup koj cov ntaub ntawv raws sij hawm, nws yuav zoo tiv thaiv cov ntaub ntawv tsis.