Bitcoin virus solution 445

1.

Yesterday, I went to the electronic reading room. Not long after I plugged in the USB flash drive, the teacher suddenly asked everyone to unplug the USB flash drive. Some students found that all the files in the USB flash drive could not be opened, and there were two more documents asking for money

so everyone rushed to check, as long as the U disk inserted in the school computer were poisoned, large-scale computer poisoning occurred in the evening

a lot of people's information and graation thesis are in the computer. I really feel that hacker's behavior is disgusting. For the sake of money, regardless of the future of students, teachers' lifelong scientific research achievements...

hope to catch criminals as soon as possible and give them severe punishment by law

this virus will scan windows devices with open 445 file sharing port. As long as the user's device is on the Internet, hackers can implant blackmail software, remote control Trojan horse, virtual currency mining machine and other malicious programs in computers and servers

some security researchers point out that this large-scale network attack seems to be deployed through a worm application, and wannacry can spread among computers. What's more terrible is that unlike most malicious programs, this program can replicate and spread on its own in the network, and most of the current viruses still need to rely on the successful users to spread by cheating them to click the attachment with the attack code

the attack has affected 99 countries and as many as 75000 computers, but because the virus uses anonymous network and bitcoin anonymous transaction to obtain ransom, it is very difficult to track and locate the originator of the virus

2. Wannacry virus is spread based on Windows system, and smartphone users will not be affected. To prevent viruses, please open the system control panel - system and security - install system patches. If you do not open the system patch function, please open and repair all vulnerabilities immediately. It is recommended to upgrade the system for systems below Windows 7. Thank you for your support and trust in Tencent housekeeper.

3. Method 1: the registry < br > first of all, to view the current system open what port, how to view it? Call out the CMD command line program, enter the command "netstat - Na", you can see< Br > "bitcoin virus" attack, teach you to close port 445 (with opening method) < br > then, you can find that the current system has opened ports 135, 445 and 5357, and they are all in the listening state from the state of "listening" bitcoin virus attack, teach you to close port 445 (with opening method) < br > then, after confirming that your system has opened port 445, We're starting to shut down this high-risk port. First, enter the "Registry Editor" of the system. The steps are: click "start", "run" in turn, and enter regedit to enter the "Registry Editor"< Br > "bitcoin virus" is coming. It teaches you to close port 445 (with opening method). Then, right click on the right side of the sub item parameters, "new", "qword (64 bit) value", and then rename it to "smbdeviceenabled", and then change the value of this sub key to 0“ Then, if your system is a Windows XP system, you can shut down port 445 by restarting it. But if it's windows 7, it won't work< Then, find the server service and double-click to enter the management control page. Change the start type of this service to "disable", the service status to "stop", and finally click apply< When the "bitcoin virus" attacks, I will teach you to close port 445 (with opening method) < br > Start - run, enter regedit. Modify the registry and add a key value hive: HKEY_ LOCAL_ MACHINE Key: Name: SMBDeviceEnabled Type: REG_ DWORD value: 1 restart running -- CMD -- enter netstat - an to see the open port

4. In short, blackmail virus is a computer virus that uses Windows system vulnerability to maliciously encrypt user files and then extort money

{rrrrrrr}

10

(3) in view of the current technical means, if blackmail virus can not be solved, it can only be completely formatted, Then, the system is reinstalled and the system vulnerability patch is made to prevent the secondary poisoning

< / UL >

5.

bus line: No. 316 interval, the whole journey is about 22.3km

1. Walk about 830m from Taisheng medicine Qinyuan chundian to Fenghui Road Station

2. Take No. 316 interval, pass 20 stops, and reach Shangzhuang Village Station (or take No. 316)

3. Walk about 590m to Jinxiu world

6. According to the report from the Internet news, experts say that once they win the recruitment, there is no solution at present.
ZHENG Wenbin said that there has been a worm virus spreading through port 445 in China, so some operators have blocked port 445 for indivial users. However, because the ecation network does not have this restriction, the campus network has become a "disaster area" attacked by blackmail virus
ZHENG Wenbin said that for computer users infected with blackmail virus whose files are encrypted, if they want to get the files back, at present, they can only pay bitcoin, and there is no other better way. But even if they pay bitcoin according to the requirements of criminals, there is no guarantee that they can get the encrypted files back. "We are also trying to find a way, Try to see if you can decrypt the encrypted file, but there is no other way
according to Zheng Wenbin, according to their monitoring, at present, in addition to the ecation network and campus network of some domestic colleges and universities, enterprises have also been affected by viruses, and some civil facilities, such as the computer systems of gas stations, have also been attacked by viruses.

7. Since you know it's in the driver's life, you can try to delete or uninstall it
if there is no problem after 360 antivirus, it is not a virus
this phenomenon also occurs after the installation of Android virtual machine, which is normal and needs no attention.