Ransomware WannaCry protection procedure English Version

Cause Of The Many People who talk only english Asking for a workaround on workstation pcs Here's' the procedure in English Lets Start Open windows notepad and paste the following code to save as namefile.reg

Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\NetBT\Parameters] "SMBDeviceEnabled"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\HTTP\Parameters] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\HTTP\Parameters\SslBindingInfo] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\HTTP\Parameters\UrlAclInfo]

have care to save it on your desktop as namefile.reg and to click it afterwards you'll receive a message box asking confirm (sorry is in italian the pic)

Click Yes And You Are Half Done ! After That You'll Have confirm that parameters have been inserted into windows registry

so last step You have to disable port 445 on services file that is under the \windows\system32\etc\drivers directory Just like that

copy and paste on command prompt this command notepad c:\windows\system32\drivers\etc\services and you'll have the file open for editing go trough the file til the microsoft-ds section and substitute with the word discard

save the file and you have done it ! write the command shutdown -r to take effect for all modifications made and you're safe! ^_^ have a nice day !

Procedura di Protezione dal Ransomware WANNACRY e tutti i ransomware che usano porta 445 (reversibile)

Procedura Rimozione Virus Cryptologic e Ransomware Wannacry Prima cosa da Fare E' Editare un file .reg con notepad poi aperto il notepad copiate e incollate la seguente stringa per disabilitare il servizio che usa la porta 445 in windows per riabilitarla basta sostituire la stringa dword:00000000 con dword:01000000 DISABILITAZIONE PORTA 445

Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\NetBT\Parameters] "SMBDeviceEnabled"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\HTTP\Parameters] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\HTTP\Parameters\SslBindingInfo] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\HTTP\Parameters\UrlAclInfo]

salvate con nome file.reg su desktop e dovrebbe comparire questo messaggio dite si e vi dara' informazioni aggiunte al registro di sistema

fatto questo editate il file services che si trova sotto c:\windows\system32\etc\drivers con la seguente riga di comando (fate copia e incolla su prompt del dos) notepad c:\windows\system32\etc\drivers\services

e avrete l'elenco delle porte tcp e udp usate dai servizi windows dove trovate microsoft-ds sostituitelo con la dicitura discard

fatto questo da prompt del dos fate reboot della macchina con il comando shutdown -r al riavvio siete protetti e tranquilli !!! CIAO !