Friday, February 7, 2020

How to protect ransomware,malware attack your PC ?

Tags


αž”αž…αŸ’αž…αž»αž”αŸ’αž”αž“αŸ’αž“αž˜αžΆαž“αž€αžΆαžšαžœαžΆαž™αž”αŸ’αžšαž αžΆαžšαžŠαŸ„αž™ ransomeware αž‚αŸ’αžšαž”αŸ‹αž”αŸ’αžšαž—αŸαž‘αžŠαŸ‚αž›αžαŸ’αžšαžΌαžœαž”αžΆαž“αž”αž„αŸ’αž€αžΎαžαž‘αžΎαž„αž€αŸ’αž“αž»αž„αž‚αŸ„αž›αž”αŸ†αžŽαž„αž•αŸ’αžŸαŸαž„αŸ—αž‘αžΆαž‰αž™αž€αž•αž›αž”αŸ’αžšαž™αŸ„αž‡αž“αŸ αžŠαžΌαž… WannaCry ransomware αžŠαŸ‚αž›αž”αžΆαž“αž€αžΎαžαž‘αžΎαž„ αž€αžΆαž›αž–αžΈαž†αŸ’αž“αžΆαŸ†αŸ’αŸ αŸ‘αŸ§  αž αžΎαž™αž’αŸ’αžœαžΎαž²αŸ’αž™αž–αž·αž—αž–αž›αŸ„αž€αž–αŸ’αžšαž½αž™αž”αžΆαžšαž˜αŸ’αž— αž“αž·αž„αžαžΆαžαž”αŸ’αžšαžΆαž€αŸ‹αžšαžΆαž”αŸ‹αž›αžΆαž“αžŠαž»αž›αŸ’αž›αžΆ αŸ”αžœαžΆαžαŸ’αžšαžΌαžœαž”αžΆαž“αž‚αŸαž”αŸ‰αžΆαž“αŸ‹αžŸαŸ’αž˜αžΆαž“αžαžΆαž”αžΆαž“αž†αŸ’αž›αž„αž‡αžΆαž„ ៑αŸ₯០ αž”αŸ’αžšαž‘αŸαžŸ  αž“αž·αž„ αž‡αžΆαž„ ្០០០០០ αž˜αŸ‰αžΆαžŸαŸŠαžΈαž“αŸ”
αžŸαŸ†αž“αž½αžšαžŸαž½αžšαžαžΆ β€‹αžαžΎαž™αžΎαž„αž’αžΆαž…αž€αžΆαžšαž–αžΆαžš ransomeware αž“αŸαŸ‡αž”αžΆαž“αžŠαŸ„αž™αžšαž”αŸ€αž”αžŽαžΆ?
αžŠαžΎαž˜αŸ’αž”αžΈαž’αžΆαž…αž€αžΆαžšαž–αžΆαžšαž”αžΆαž“  αž™αžΎαž„αž˜αžΆαž“αžœαž·αž’αžΈαžŠαžΌαž…αžαžΆαž„αž€αŸ’αžšαŸ„αž˜αŸ–
៑.Window pc αž‚αž½αžšαžαŸ‚ update patch security αž’αŸ„αž™αž”αžΆαž“αž‘αŸ€αž„αž‘αžΆαžαŸ‹αž–αžΈMicrosoft .
្.αž”αŸ’αžšαžΎαž”αŸ’αžšαžΆαžŸαŸ‹ antivirus αžŠαŸ‚αž›αž˜αžΆαž“ License αžαŸ’αžšαžΉαž˜αžαŸ’αžšαžΌαžœ αžŠαžΌαž…αž‡αžΆ  MalwareByte,Kaspersky,Avast,Bitdefender,Eset,Avira αž‡αžΆαžŠαžΎαž˜.
៣.αž”αŸ’αžšαžΎαž”αŸ’αžšαžΆαžŸαŸ‹ Anti rassomeware program   αžŠαžΌαž…αž‡αžΆ malwarebyte anti ransomewae,kaspersky anti ransomeware.

αž˜αž½αž™αžšαžΏαž„αž‘αŸ€αžαžŠαŸ‚αž›αž™αžΎαž„αžαŸ’αžšαžΌαžœαž™αž›αŸ‹αžŠαžΉαž„ αž‚αžΊ Hacker Exploit  PC αžŠαŸ„αž™αž•αŸ’αž‘αžΆαž›αŸ‹αžšαž½αž… run ransomeware αž“αŸ…αž›αžΎαž˜αŸ‰αžΆαžŸαŸŠαžΈαž“αžšαž”αžŸαŸ‹αž’αŸ’αž“αž€αž•αŸ’αž‘αžΆαž›αŸ‹αžαŸ‚αž˜αŸ’αžαž„αž“αŸ„αŸ‡αž‚αžΊ EternalBlue (Cyberattack exploit) Develop by the U.S National Security Agency(NSA).αž”αž“αŸ’αž‘αžΆαž”αŸ‹αž˜αž€αžœαžΆαžαŸ’αžšαžΌαžœαž‚αŸαžšαž€αž…αž“αŸ’αž›αŸ„αŸ‡αž”αŸ’αžšαž αŸ„αž„αžƒαžΎαž‰αžŠαŸ„αž™ Shadow Broker hacker Group αž“αŸ…αžαŸ‚αž˜αŸαžŸαžΆ β€‹αžαŸ’αž„αŸƒαž‘αžΈ ៑ៀ αž†αŸ’αž“αžΆαŸ† ្០៑៧ .αž˜αž½αž™αžαŸ‚αž€αŸ’αžšαŸ„αž™αž˜αž€ Microsoft αž€αŸαž”αž‰αŸ’αž…αŸαž‰ Patches Security for vulnerability.

Link  for Vulnerability.
http://www.catalog.update.microsoft.com/Search.aspx?q=KB4012214
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0143
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0143

αž…αŸ†αžŽαž»αž…αž“αŸαŸ‡αžŸαŸ†αžαžΆαž“αŸ‹αžŽαžΆαžŸαŸ‹αž”αŸ’αžšαžŸαž·αž“αž’αŸ’αž“αž€αž˜αž·αž“αž”αžΆαž“ Update Window αž“αŸ„αŸ‡αž³αž€αžΆαžŸαž“αŸƒαž€αžΆαžšαž†αŸ’αž›αž„ ransomware αž˜αžΆαž“αž€αž˜αŸ’αžšαž·αžαžαŸ’αž–αžŸαŸ‹αžŽαžΆαžŸαŸ‹αž‘αŸ„αŸ‡αž˜αžΆαž“Antivirus αž€αŸαž‘αž”αŸ‹αž˜αž·αž“αžˆαŸ’αž“αŸ‡αžŠαŸ‚αžšαŸ”

αž”αž‘αž–αž·αžŸαŸ„αž’αž“αŸαž“αŸƒαž€αžΆαžšαž†αŸ’αž›αž„αžαžΆαž˜αžšαž™αŸˆ EternalBlue Attack αž›αžΎ Window PC  αž“αž·αž„  Server.
I have use window server 2012 standard.below is a picture that alert error  when it attack after server that no Antivirus  no Update  restart and alert message error different that cause us  to difficult to solve this.
αžαžΎαžαŸ’αž‰αž»αŸ†αž’αŸ’αžœαžΎαž€αžΆαžšαžŠαŸ„αŸ‡αžŸαŸ’αžšαžΆαž™αžŠαŸ„αž™αžšαž”αŸ€αž”αžŽαžΆ?
αž™αžΎαž„αžŠαžΉαž„αž αžΎαž™αžαžΆ computer  αž“αž·αž„  server αžšαž”αžŸαŸ‹αž™αžΎαž„αž”αžΆαž“αž†αŸ’αž›αž„virus αž αžΎαž™ αž…αŸ†αž–αŸ„αŸ‡αžœαžΈαž’αžΈαžŠαŸ„αŸ‡αžŸαŸ’αžšαžΆαž™αž‚αžΊαž˜αžΆαž“αž…αŸ’αžšαžΎαž“αžšαž”αŸ€αž”αžŽαžΆαžŸαŸ‹αŸ”αž”αŸ‰αž»αž“αŸ’αžαŸ‚αž’αŸ’αžœαžΈαžŠαŸ‚αž›αž’αŸ’αž“αž€αžαŸ’αžšαžΌαžœαžŠαžΉαž„ αžαžΎαžœαžΆαž˜αž€αž–αžΈαžŽαžΆ  αžŠαŸ„αž™αžšαž”αŸ€αž”αžŽαžΆ  αž αžΎαž™PC  αž“αž·αž˜αž½αž™αŸ—αž˜αžΆαž“Antivirus αž’αŸ’αžœαžΈαžαŸ’αž›αŸ‡? αž…αŸ†αžŽαž»αž…αž˜αž½αž™αžŠαŸ‚αž›αžαŸ’αž‰αž»αŸ†αž‡αž½αž”αž‚αžΊ  αžšαžΆαž›αŸ‹ PC αžŠαŸ‚αž›install Antivirus AVG free  and Eset Not32  αž˜αž·αž“αž˜αžΆαž“αž”αž‰αŸ’αž αžΆαž‚αŸ’αžšαžΆαž“αŸ‹αžαŸ‚αž”αž„αŸ’αž αžΆαž‰αžαžΆαž˜αžΆαž“  Message  Error αž αžΎαž™αž˜αžΆαž“ Attacker αž”αž“αŸ’αž‘αžΆαž”αŸ‹αž˜αž€αžœαžΆ  Block Connection.αž”αŸ‰αž»αž“αŸ’αžαŸ‚αž…αŸ†αž–αŸ„αŸ‡ ​Antivirus 360 αžšαž”αžŸαŸ‹αž…αž·αž“αžœαž·αž‰  Computer αž‘αŸ…αž‡αžΆ Blue Screen αž“αŸαŸ‡αž”αž„αŸ’αž αžΆαž‰αžαžΆ ៣៦០ αžšαž”αžŸαŸ‹αž…αž·αž“αž”αŸ’αžšαžΎαž˜αž·αž“αž€αžΎαžαž‘αŸ  αž αžΎαž™αžœαžΆαž‘αžΆαž‰ αž€αž˜αŸ’αž˜αžœαž·αž’αžΈαž•αŸ’αžŸαŸαž„αŸ—αž…αžΌαž›PC αžŠαŸ„αž™αž˜αž·αž“αžŠαžΉαž„αžαŸ’αž›αž½αž“.

αžšαžΏαž„αžŠαŸ‚αž›αž™αžΎαž„αžαŸ’αžšαžΌαžœαž’αŸ’αžœαžΎαž”αž“αŸ’αž‘αžΆαž”αŸ‹αž‚αžΊ Patch Security all PC by version of Window 7,8,10,server 2012,server 2012 r2.
αž…αŸ†αž–αŸ„αŸ‡ ​Patch Security We Can find link below:

https://tiago.deretti.net/wannacrypt/
https://www.catalog.update.microsoft.com/

αž…αŸ†αž–αŸ„αŸ‡
window server 2012 (kb4012214,4012217,4015551,4019216)
https://drive.google.com/open?id=1e43VimxWD66W-TmnEguU2IduqUA7DT4x

Window 7  service pack 1
https://drive.google.com/open?id=1tOUVx1m_UkvNfWbLbznSb5SkBVbSoAjI

Window 10
https://drive.google.com/open?id=1NauMKiJ1NfTkfkJPp3hV3ijjWxGJniS1

Window Xp Service pack 2
https://drive.google.com/open?id=1-3hOE1q0JQ2xRhcP5Zh42_3L63V4MbiH

Window Xp Service pack 3
https://drive.google.com/open?id=1OzG8WECpg8c29EAMHEI7TPq9pHz6Sqyq

Check Security by TrendMicro Support
https://drive.google.com/open?id=1alsne-lN3I6IyhsTuY3PjM3wIJ2GkftZ

Check by Script to Verified PC was patched or not
https://drive.google.com/open?id=1LaxMhEN-r4Tzyjuhy6QIPs0z6OIg7sSJ 

One more We can use Nmap application to check that too.
https://nmap.org/

cmd >C:\Program Files (x86)\Nmap\scripts\nmap -p445 --script smb-vuln-ms17-010  localhost