Create a single file to protect yourself from the latest ransomware

    Create a single file to protect yourself from the latest ransomware

    Create a single file to protect yourself from the latest ransomware


    Posted: 28 Jun 2017

    There's no cure for the latest ransomware attack, but a researcher has discovered a way to prevent infection through the creation of a single Windows file.
    As reported by Bleeping Computer, there is a way to prevent infection -- not cure, but protect from -- which takes no more than a few minutes of your time.

    After investigating the Petya ransomware, Cybereason security researcher Amit Serper realized that if the malware is downloaded and executes on an infected system, the ransomware looks for a specific local file and will both exit and not encrypt a system if that file is found.
    In order to enable the preventative measure, an extensionless file called perfc needs to be created in the C:\Windows folder and made read-only.
    This is not a kill-switch for Petya. As of the time of writing, no researcher has been able to find a way to create one to shut down the campaign. However, this is a measure that can protect individual systems -- at least, for now.

    As the workaround is now public, it is possible the Petya operators will modify the malware's source to negate these defenses. Patching, as in many cases, is king.
    Create a single file to protect yourself from the latest ransomware attack | ZDNet
    Borg 386's Avatar Posted By: Borg 386
    28 Jun 2017


  1. Posts : 3,109
    W10 Pro + W10 Preview
       #1

    Vacinate?
    Attached Thumbnails Attached Thumbnails Create a single file to protect yourself from the latest ransomware-pet-note.jpg  
      My Computers


  2. Posts : 124
    Windows 10.0.15063 (Version 1703) Pro 64-bit
       #2

    dencal said:
    Vacinate?
    At this point it is a matter of securing your inbound and outbound firewall ports and turning off insecure daemons (services).
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 12:26.
Find Us




Windows 10 Forums