วันศุกร์ที่ 19 พฤษภาคม พ.ศ. 2560

The way to protect 'Wanna Decryptor' Malware | ป้องกัน Wannacry มัลแวร์ก่อนจะสาย ...

The way to protect 'Wanna Decryptor' Malware | ป้องกัน Wannacry มัลแวร์ก่อนจะสาย ...


  • Disable SMB 1.0/cifs file sharing support

1. Go to "Server Manager" -> Dashboard's Tab -> Manage -> "Remove Roles and Features "

2. Look at "Remove Roles and Features Wizards's pop-up".
    Next, Clicks Features's Tab -> Disable "SMB 1.0/CIFS File Sharing Support" (Untick) and clicks Next.


3. Confirm removal selections  -> Ticks "Restart the destination server automatically if required". Then "Next >"  button is enabled and Clicks Next. 
For this step you must restart server to update Features.


4. Ultimately, when you restart the server successfully , Removal progress is shown results and then  clicks "close".




  • Update patch windows server
          Nowadays, that is the important solution to protect all of Malwares (WaanCry) in your computer server. There are a lot of patches is improved to fix bugs on Windows server.

1. Download Security Update for Microsoft Windows SMB Server (4013389). Follow link :  https://technet.microsoft.com/en-us/library/security/ms17-010.aspx
2. Create folder Temp in C:\Temp or others folder's name. Next, copy Patch file(Microsoft Update Standalone Package (.msu) ) into folder Temp.  


3. You need to extract the  Microsoft Update Standalone Package (.msu) file to .cap file.
   Next, create folder "kb4012213" (C:\Temp\kb4012213)  to put extracting file.
   Next, open command line -> Typing : cd c:\  
   Typing : Expand -F:* c:\Tempp\windows8.1-kb4012213- x64_5b24b9ca5a123a844ed793e0f2be974148520349.msu C:\Tempp\kb4012213
   Next, Look at folder kb4012213. Extracting file (.cab) is shown in folder.
  Next, run .cab file with DISM installation.
  Typing : dism.exe /Online /Add-Package /PackagePath:C:\Tempp\kb4012213\Windows8.1-KB4012213-x64.cab
   

4. Check  update patch in Control Panel\Programs\Programs and Features -> Views Installed Updates.