WannaCry ransomware worm: It spreads by exploiting an operating system vulnerability, and by the lack of Windows security update, blocking hard disk data that can only be unlocked after transferring a certain amount.
It does not necessarily spread through an infected email attachment, attackers often use traditional phishing emails, so do not open unknown email. If it is a suspicious email, delete, or quarantine.
First: change the base settings in Windows Firewall to protect your data.
Attention: If you are using a Windows 10 system and Auto Update is turned on, the following description should not be done because it contains the update that was automatically performed. Therefore, follow the instructions below to see if there is an upgrade for Windows Server 2003, Windows XP, Windows 8, and Windows 10.
1.) Press the Windows -Logo + R keys on the keyboard at the same time.
2.) In the Run dialog box, enter firewall.cpl. It will launch the Windows Firewall (Windows Defender Security Center).
3.) Click on the Advanced Settings link on the left.
4.) Click on the Inbound Rules in the left menu, then in the same window, to the right, on the New Rule link.
5.) Mark radio button Port and click on the Next button.
6.) In the Specific Local Ports line, enter number 445 then click on the Next button.
7.) Select the Block the connection radio button, then click on the Next button.
8.) Select all three cassettes, then click on the Next button.
9.) Under Name enter 445 tcp and click on the Finish button.
10.) Finally, if you reopen the Windows Firewall, you will see the new rule.
Repeat the above settings again, but now set the UDP instead of "TCP" (based on the above we finished this step right now).
Do the following:
1.) Based on the above descriptions, re-open the Windows Firewall window and click on Inbound Rules in the left menu, then in the same window to the right of the New Rule.
2.) Mark radio button Port and click on Next.
3.) Instead of "TCP," select the UDP radio button and enter 445 in the Specific Local Port line, then click on the Next button.
4.) In the next window, select the Block the connection radio button, then click on the Next.
5.) Select all three cassettes, then click on the Next button.
6.) Under Name enter number 445 udp, and then click on the Finish.
7.) Finally, if you reopen the Windows Firewall, you will see two new banning rules.
Now you can close all windows.