{"id":493,"date":"2017-05-15T08:33:32","date_gmt":"2017-05-15T01:33:32","guid":{"rendered":"https:\/\/vannamit.com\/?p=493"},"modified":"2017-05-15T08:33:32","modified_gmt":"2017-05-15T01:33:32","slug":"cach-phong-chong-ma-doc-tong-tien-wannacry-tren-moi-windows","status":"publish","type":"post","link":"https:\/\/khowordpress.com\/vannamit\/cach-phong-chong-ma-doc-tong-tien-wannacry-tren-moi-windows\/","title":{"rendered":"C\u00e1ch ph\u00f2ng ch\u1ed1ng m\u00e3 \u0111\u1ed9c t\u1ed1ng ti\u1ec1n Wannacry tr\u00ean m\u1ecdi Windows"},"content":{"rendered":"<p>V\u1ec1 m\u00e3 \u0111\u1ed9c n\u00e0y th\u00ec m\u00ecnh ch\u1eafc ch\u1eb3ng c\u1ea7n ph\u1ea3i n\u00f3i qua n\u1eefa v\u00ec tr\u00ean facebook kh\u00e1 l\u00e0 ph\u1ed5 bi\u1ebfn r\u1ed3i. Cho n\u00ean m\u00ecnh s\u1ebd \u0111i v\u00e0o v\u1ea5n \u0111\u1ec1 lu\u00f4n.<br \/>\nTrong b\u00e0i vi\u1ebft n\u00e0y m\u00ecnh s\u1ebd chia s\u1ebb t\u1edbi c\u00e1c b\u1ea1n c\u00e1ch ph\u00f2ng ch\u1ed1ng m\u00e3 \u0111\u1ed9c t\u1ed1ng ti\u1ec1n Wannacry tr\u00ean m\u1ecdi Windows c\u1ee7a t\u00e1c gi\u1ea3 &#8220;<b>Kiet Nguyen Anh Production<\/b>&#8221; l\u00e0 Admin of Linux Team Vi\u1ec7t Nam.<\/p>\n<p><b>B\u1eaft \u0110\u1ea7u:<\/b><\/p>\n<p><b>A. Ki\u1ec3m tra port 445<\/b><\/p>\n<pre>M\u1edf CMD quy\u1ec1n Admin v\u00e0 g\u00f5\nnetstat -an | findstr 445\nN\u1ebfu g\u00f5 kh\u00f4ng hi\u1ec7n ra c\u00e1i g\u00ec th\u00ec l\u00e0 OK c\u00f2n n\u1ebfu c\u00f3 ch\u1eef LISTENNING th\u00ec ph\u1ea3i block port ngay<\/pre>\n<pre><b>B. T\u1eaft SMB <\/b>(M\u1edf Powershell l\u00ean v\u00e0 o\u00e1nh c\u00e1c l\u1ec7nh sau)\nM\u1edf Start-&gt; Windows PowerShell-&gt; Ph\u1ea3i chu\u1ed9t v\u00e0o Windows Powershell ch\u1ecdn Run as administrator\nCopy t\u1eebng d\u00f2ng Paste v\u00e0o. N\u1ebfu n\u00f3 hi\u1ec7n l\u1ed7i g\u00ec th\u00ec b\u1ecf qua sang d\u00f2ng kh\u00e1c\nRemove-WindowsFeature FS-SMB1\nDisable-WindowsOptionalFeature -Online -FeatureName smb1protocol\nsc.exe config lanmanworkstation depend= bowser\/mrxsmb20\/nsi\nsc.exe config mrxsmb10 start= disabled\nsc.exe config lanmanworkstation depend= bowser\/mrxsmb10\/nsi \nsc.exe config mrxsmb20 start= disabled\nSet-SmbServerConfiguration -EnableSMB2Protocol $false\nSet-ItemProperty -Path \"HKLM:\\SYSTEM\\CurrentControlSet\\Services\\LanmanServer\\Parameters\" SMB2 -Type DWORD -Value 0 -Force<\/pre>\n<pre><b>B. Ch\u1eb7n port 445\/137\/138\/139  tr\u00ean Firewall<\/b>\nM\u00e1y n\u00e0o c\u00e0i Antivirus m\u00e0 c\u00f3 t\u01b0\u1eddng l\u1eeda ri\u00eang th\u00ec ph\u1ea3i c\u1ea5u h\u00ecnh tr\u00ean t\u01b0\u1eddng l\u1eeda ri\u00eang\nc\u1ee7a Anivirus\nC\u00f2n m\u00e1y n\u00e0o ko x\u00e0i Antivirus ho\u1eb7c Windows Defener th\u00ec l\u00e0m nh\u01b0 sau\nB1: M\u1edf Start search c\u1ee5m t\u1eeb Firewall v\u00e0 ch\u1ecdn Windows Firewall with Advanced security\nB2: Inbound Rules-&gt; New Rule-&gt; Port\nB3: Ch\u1ecdn UDP-&gt; Specific local ports nh\u1eadp d\u00f2ng n\u00e0y v\u00e0o 445, 137, 138, 139\nB4: Block the connection\nB5: Tick c\u1ea3 3 c\u00e1i\nB6: \u0110\u1eb7t t\u00ean t\u00f9y \u00fd-&gt; finish\nB7: Ki\u1ec3m tra l\u1ea1i xem b\u1eadt firewall ch\u01b0a, ch\u01b0a th\u00ec b\u1eadt l\u00ean<\/pre>\n<pre><b>C. T\u1eaft Sever service<\/b>\nB1: Run-&gt; Services.msc\nB2: T\u00ecm t\u1edbi Services Server. Ph\u1ea3i chu\u1ed9t ch\u1ecdn Stop\nB3: Click \u0111\u00fap v\u00e0o n\u00f3. Startup type s\u1eeda th\u00e0nh Disabled. Apply-&gt;OK\nSau khi l\u00e0m xong t\u1ea5t c\u1ea3 <b>RESTART L\u1ea0I M\u00c1Y<\/b>. <b>C\u1ea4M SHUTDOWN<\/b><\/pre>\n<p><iframe loading=\"lazy\" src=\"https:\/\/www.youtube.com\/embed\/OlOd51Wd5Nc\" width=\"560\" height=\"315\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\n<p>Ngu\u1ed3n: t\u1ed5ng h\u1ee3p<\/p>\n","protected":false},"excerpt":{"rendered":"<p>V\u1ec1 m\u00e3 \u0111\u1ed9c n\u00e0y th\u00ec m\u00ecnh ch\u1eafc ch\u1eb3ng c\u1ea7n ph\u1ea3i n\u00f3i qua n\u1eefa v\u00ec tr\u00ean facebook kh\u00e1 l\u00e0 ph\u1ed5 bi\u1ebfn r\u1ed3i. Cho n\u00ean m\u00ecnh s\u1ebd&#8230;<\/p>\n","protected":false},"author":1,"featured_media":494,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[26],"class_list":["post-493","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tin-tuc","tag-wannacry"],"_links":{"self":[{"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/posts\/493","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/comments?post=493"}],"version-history":[{"count":0,"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/posts\/493\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/media\/494"}],"wp:attachment":[{"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/media?parent=493"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/categories?post=493"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/khowordpress.com\/vannamit\/wp-json\/wp\/v2\/tags?post=493"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}