Hainan Network Security: every unit will pull out the network cable before starting up the ransomware outbreak on Monday

Please pay attention!

Recently, the ransomware broke out in WannaCry. In order to prevent the virus from being infected just after starting up on Monday, causing all files on the hard disk to be maliciously encrypted, please disconnect the network before starting up, perform the following protection operations in sequence:

1. The network is disconnected. Disconnect the network cable! Disconnect the network cable! Disconnect the network cable! Say important things three times.

2. Consult the network security administrator of this unit to obtain the windows patch installation CD.

3. Boot up. Attention! If you have found that your computer has been infected with viruses and files are encrypted, access to the network is prohibited! No access to the network! No access to the network!

4. Use the CD to install patch windows.

5. Back up important files in the computer with different media (CD, etc.).

6. Confirm that port 445 is closed. The cmd window of the local machine runs the command “netstat -ano | findstr”:445 “”, and no return is returned after entering.

7. Confirm that the CD patch has been installed. After I have finished, check the update and patch on the Internet. In recent days, Microsoft patch update server has too much access traffic and slow connection speed. Please try several times.

All hosts using the windows operating system may be infected, especially the education network, internal network, private network, and local area network of each unit “, hosts in the network have been slow to update patches for a long time, so they are more vulnerable to virus infection.

Please ask the network security administrator of each unit

Notify all personnel of the unit according to the above requirements to avoid a wave of paralysis peak on Monday. At the same time, immediately shut down dangerous ports such as 445 on each server and network device, and then handle individual users to prevent viruses from spreading widely through servers and network devices, prevent users from installing new systems and getting infected. If the intranet is inconvenient to download and patch, please contact the local network security manufacturer in time. The emergency team of each security manufacturer will arrange personnel to provide on-site services.

All network security companies

Release an announcement in time to remind users not to use unknown patch packages and decryption software, and prevent hackers from making patch packages and decryption software with Trojan virus from spreading.


Please pay attention! Please pay attention! Please pay attention! Recently, the ransomware broke out in WannaCry. In order to prevent the virus from being infected just after starting up on Monday, causing all files on the hard disk to be maliciously encrypted, please disconnect the network before starting up and perform the following protection in sequence.

Leave a Reply

Your email address will not be published. Required fields are marked *