Once the computer is infected it will contact the central system of the software for the information it needs to activate and then begin to encrypt files. Once the files in the computer is encrypted it will ask for payment in bitcoin to decrypt the files.<\/p>\n
The creators of ransomware is still unknown, an earlier version named WeCry was discovered back in February this year. <\/p>\n
– Keep the system Up-to-date: If you are using outdated versions of OS and softwares, please make the system up-to-date.<\/p>\n
– Enable Windows firewall: Configure windows firewall correctly to avoid the attack, this attack normally operates on TCP ports 137, 139 and 445 and over UDP ports 137 and 138.<\/p>\n
– Avoid phishing websites and emails: Never open untrusted websites and don\u2019t open email attachment from untrusted senders.<\/p>\n
– Microsoft security patch: Microsoft has already released the security patch MS17-010 system security update to fix this vulnerability, update the patches as soon as possible.<\/p>\n
– Use Antivirus: An updated anti virus is highly recommended, also use antivirus program to scan the emails.<\/p>\n
– Block legacy protocols such as SMB v1: Always try to disable legacy protocols such as SMB v1, v2,v3 etc in windows.<\/p>\n
– Regular Backup: Always try to keep latest copies of user data to prevent data loss.<\/p>\n
Once ransomware has encrypted the files there is not much we can do. If you have latest backup of your files, you should be able to restore the files after cleaning the computer.
\nAccording to Security experts there is no guarantee that access will be granted after the payment has been made. <\/p>\n
<\/div>\n