Posts: 169
Threads: 3
Joined: Nov 2015
Reputation:
27
The worldwide ransomware attack has been partially contained but is still a major threat. The only way to protect your data is to do an "Offline" backup on a regular basis. The easiest way to do this is to buy a portable hard drive with a backup program. These usally connect via USB.
1. Disconnect your internet connection from the computer.
2. Run the backup program.
3. Disconnect the portable drive from your computer.
4. Re-connect to the internet.
5. Repeat regularly
When the ransomware virus hits your computer, it encrypts all the files on your computer and all drives attached to your computer. By performing an offline backup then disconnecting the drive, the backup files are safe from the virus. It's a good idea to keep sevral days of backup on hand in case your backup inadvertently brought the virus along during the backup process.
Keep safe!
MCS
Posts: 1,759
Threads: 37
Joined: May 2015
Reputation:
452
I found this on a reliable site-
If you are using Windows 10, you are not vulnerable to SMB vulnerability.
3. Disable SMB
Even if you have installed the patches, you are advised to disable Server Message Block version 1 (SMBv1) protocol, which is enabled by default on Windows, to prevent against WannaCry ransomware attacks.
Here's the list of simple steps you can follow to disable SMBv1:
Go to Windows' Control Panel and open 'Programs.'
Open 'Features' under Programs and click 'Turn Windows Features on and off.'
Now, scroll down to find 'SMB 1.0/CIFS File Sharing Support' and uncheck it.
Then click OK, close the control Panel and restart the computer.
4. Enable Firewall & Block SMB Ports
Always keep your firewall enabled, and if you need to keep SMBv1 enabled, then just modify your firewall configurations to block access to SMB ports over the Internet. The protocol operates on TCP ports 137, 139, and 445, and over UDP ports 137 and 138.
Posts: 14,375
Threads: 1,802
Joined: Jun 2015
Reputation:
3,576
Great info TG ...
That crap is really awful, seems like they could track down, if not where it originated, but where the "ransom" is actually picked up or stored ...
Way smarter minds than I own apparently ...
Ice
Semper Fidelis
![[Image: SyAa0qj.png]](https://i.imgur.com/SyAa0qj.png)
USMC
Nemo me impune lacessit
Posts: 1,759
Threads: 37
Joined: May 2015
Reputation:
452
Should have said folk should apply that fix i posted if still running a version before win 10.
Just to be on the safe side i applied it to my pc running W10.Ya never know.
Posts: 169
Threads: 3
Joined: Nov 2015
Reputation:
27
I agree that you should apply all possible patches and fixes. However, there will come a time when a new virus will find a new exploit and you'll be stuck with a brick for a computer. The offline backup is the only way to ensure you don't lose important files.
MCS
Posts: 290
Threads: 16
Joined: Mar 2017
Reputation:
72
oddly enough the SMB is running by default on win10,that said typing into windows search windows features and un ticking smb1 file sharing disables it,now not sure does it impact local network specially if one has setup for server of some sort of file sharing,but in most cases home users could block port 443 on router,that said not quite sure how this worm operates but most affected seem to be were running windows xp and it was long time known issue,since by attack stats seems most affected were large government branches.
offline storage is best solution given that 1gb costs less then 10c nowadays ,so in many cases it trickles down to how important is your data,since in the past lost 1tb of pictures from 20 years and while it does hurt,but at the end of the day its only digital data
Posts: 435
Threads: 2
Joined: Oct 2016
Reputation:
102
After reading the above I run to do a backup before doing anything else !
and I use IOBit stuff... 
