M'mwezi wa Meyi 2017, WannaCry, chiwombolo Zitha kukhala zikuyambitsa mavuto padziko lonse lapansi zikagunda ma PC pafupifupi 300,000 m'maiko 150 m'maola 72 okha, koma sizitanthauza kuti inali dipo lapamwamba kwambiri. Inde, ofufuza zachitetezo ku Ma Lab Kas Kasky posachedwapa apeza zolakwika zina mu pulogalamu ya WannaCrypthlengware worm.
Zolakwitsa izi m'ndondomeko ya WannaCrypt ransomware zitha kuloleza ena mwa omwe adawazunza kuti abwezeretse mafayilo awo otsekedwa ndi zida zobwezeretsera zaulere pagulu kapena ngakhale ndi malamulo osavuta, osalipira chinsinsi chilichonse.
Anton Ivanov, wofufuza wamkulu wa pulogalamu yaumbanda ku Kaspersky Lab, pamodzi ndi omwe amagwira nawo ntchito a Fedor Sinitsyn ndi Orkhan Mamedov, atafufuza mozama zaumbanda, afotokoza zolakwika zitatu zoyipa zomwe opanga a WannaCry amatha kulola ma sysadmins kuti abwezeretse mafayilo omwe atayika.
Malinga ndi ofufuzawo, vutoli limakhala momwe pulogalamu yaumbanda imagwirira ntchito kubisa.
"Wannacry ikasunga mafayilo amunthu wake, imawerengedwa kuchokera pa fayilo yoyambayo, imasunga zomwe zalembedwazo ndikuzisunga mufayiloyo ndikuwonjezera" .WNCRYT ". Pambuyo pakubisa imasunthira ".WNCRYT" kulowa ".WNCRY" ndikuchotsa fayilo yoyambayo. Izi zimachotsedwa mosiyanasiyana malinga ndi malo komanso mafayilo amawu. "
WannaCry imasindikiza mafayilo ndikupanga makope awo obisika chifukwa sizingatheke kuti pulogalamu yoyipa isunge mwachinsinsi kapena kusintha mafayilo owerenga okha. Ngakhale mafayilo oyambilira amakhala osakhudzidwa koma amapatsidwa chikhumbo 'chobisika', kuti abwezeretse zomwe adalemba poyambirira kumangofunika kuti omwe achitiridwa izi abwezeretse zomwe anali nazo.
https://www.alltechbuzz.net/fix-wannacrypt-ransomware-backdoor/
Kubwezeretsa Mafayilo kuchokera mu System Drive (ie C drive)
Malinga ndi ofufuza, mafayilo omwe amasungidwa mu 'mafoda ofunikira', monga chikwatu cha Desktop kapena Zolemba, sangapezeke popanda kiyibodi yachinsinsi chifukwa WannaCry idapangidwa kuti izilemba mafayilo oyambira ndi zidziwitso zisanachotsedwe.
Komabe, ofufuza adawona kuti mafayilo ena omwe amasungidwa kunja kwa 'mafoda ofunikira' pamakina oyendetsa akhoza kubwezeretsedwanso kuchokera mufoda yakanthawi pogwiritsa ntchito pulogalamu yobwezeretsa deta.
"Ngati fayiloyo yasungidwa kunja kwa mafoda 'ofunikira', ndiye kuti fayilo yoyambayo idzasamutsidwa kupita ku% TEMP% \% d.WNCRYT (pomwe% d ikuimira kuchuluka kwa manambala). Mafayilowa amakhala ndi zoyambirirazo ndipo sizinalembedwe, amangofufutidwa mu disk, zomwe zikutanthauza kuti pali mwayi waukulu kuti zibwezeretsenso pogwiritsa ntchito pulogalamu yobwezeretsa deta. ”
Kubwezeretsa Mafayilo kuchokera ku Ma Drives Osayang'anira
Malinga ndi ofufuza, pazoyendetsa zosagwiritsa ntchito makina, WannaCry Rhlengware imapanga chikwatu chobisika cha '$ RECYCLE', chomwe sichimawoneka mu Windows File Explorer ngati chili ndi kusinthika kosasintha. Pulogalamu yaumbanda imasunthira mafayilo am'ndondomekoyo pambuyo pobisa. Komabe, mutha kupezanso mafayilo pokhapokha mutatsegula foda ya '$ RECYCLE'.
Komanso, chifukwa cha "zolakwika zolumikizirana" mu pulogalamu ya dipo, nthawi zambiri mafayilo oyambayo amakhala mgulu lomwelo ndipo samasunthidwa ku $ RECYCLE, zomwe zimapangitsa kuti omwe achitiridwa nkhanza abwezeretse mafayilo omwe achotsedwa mosavomerezeka pogwiritsa ntchito pulogalamu yopezeka ndi data.
Zolakwa za WannaCry Rhlengware Programming:
Ofufuza a Kaspersky Lab apeza kuti pulogalamuyi ili ndi cholakwika pakuwongolera mafayilo owerenga okha. Ngati pali mafayilo otere pamakina omwe ali ndi kachilomboka, ndiye kuti pulogalamu yowombolera sidzawateteza konse. Ingopanga mtundu wachinsinsi wa fayilo yoyambirira, pomwe mafayilo oyambilira amangopeza "zobisika”Chikhumbo. Izi zikachitika, ndizosavuta kuzipeza ndikubwezeretsanso zomwe ali nazo.
- Okonza dipo apanga zolakwitsa zambiri ndipo mtundu wa code ndiwotsika kwambiri.
- Ngati mudapatsidwa kachilombo ka WannaCry, pali kuthekera kuti mutha kubwezeretsa mafayilo ambiri pakompyuta yomwe yakhudzidwa.
- Kuti mubwezeretse mafayilo, mutha kugwiritsa ntchito zinthu zaulere zomwe zingapezenso mafayilo.
Nkhani yoyambirira gwero
