Worldwide ransomware attack general part 3

I told you to use Linux.

>>60354457
>No faq

>>60354457
/g/ still uses wankbloz?

File: 2016-05-17-171659_1280x720_scrot.png (267KB, 1280x720px) Image search: [Google]

267KB, 1280x720px

Ban on Microsoft telemarketer when?

I literally cannot update my system. Haven't updated in a year and a half. I'm probably already dead.

if you haven't switched to Linux yet you don't belong on /g/

fuck off.

Don't worry guy, one day there will be a widespread malware attack against Unix-like OS's and then we'll get to laugh that them. Brb, sending bitcoins to some chinks.

File: wannacry.jpg (68KB, 960x540px) Image search: [Google]

68KB, 960x540px

Feels good not to be winfag

>>60354382
>>60354407
Thirding.

NSA FALSE FLAG !! DO NOT UPGRADE !! UNPLUG ETHERNET UNTIL 6PM EST MAY 24TH
NSA FALSE FLAG !! DO NOT UPGRADE !! UNPLUG ETHERNET UNTIL 6PM EST MAY 24TH
NSA FALSE FLAG !! DO NOT UPGRADE !! UNPLUG ETHERNET UNTIL 6PM EST MAY 24TH

I think we can all agree that IT guys are at fault here, they can't even enable automatic updates and it's hilarious seeing the pajeets on reddit openly admitting their companies' systems got fucked without even realizing that it's their job to make sure that doesn't happen.

General reminder that you need KB4012212 for windows 7 KB4012216 for windows 8.1 and KB4013429 for windows 10.
You can download the patches from Microsoft's servers by clicking on the OS you have in the table which will take you a download page for it.
https://technet.microsoft.com/en-us/library/security/ms17-010.aspx
It is also acceptable to install the later cumulative security updates which contain the older fixes.

>>60354526
I'm sure it'll happen right after the Year Of The Linux Desktop.

I'll wait.

So am I reading the Mbam article right then the virus just kills itself because the domain is sinkholed. Could someone more in the know elaborate on this?

Reminder than GNU/Linux doesn't have this problem

>>60354457
winfags get what what they deserve. it's an insecure piece of shit and if this ransomware happened to you then I hope you learned your lesson.

>>60354457
For people who don't know how to block Port 445 use these instructions.

http://www.thewindowsclub.com/block-open-port-windows-8-firewall

https://gist.github.com/rain-1/989428fa5504f378b993ee6efbc0b168

Related.

I haven't updated windows 7 in over 2 years and I have no backups. Honestly I don't really give a shit, worst case I lose my meme folder

Guys microsoft update has been compromised.

Just got the virus after installing windows 10.

DONT OPEN WINDOWS UPDATE IF YOU DONT WANT TO BE INFECTED THE SERVERS ARE INFECTED WITH THE WORM

>>60354511
http://wu.krelay.de/en/

This is because microsoft breaks its own shit

>>60354614
are you serious?

>>60354614
for the record, where can I go to deliberately infect myself with this? Wanna try it in a virtual machine to laugh at what winfags are dealing with

File: LinuxMasterRace.png (596KB, 1200x796px) Image search: [Google]

596KB, 1200x796px

>when winfags get ransomware but you jump that ship long ago

>>60354635
why would someone lie on the internet?

>>60354525
This
We told you to install gentoo
You didn't listen

>>60354614
Why should I believe you?

i'm installing debian lol

>>60354636
I HAD WINDOWS 7 AND DECIDED TO UPDATE TO 10
THE WINDOWS UPDATE DOWNLOADED A BUNCH OF SHIT INCLUDING WINDOWS 10 ITSELF, RESTARTED A COUPLE OF TIME BUT THE LAST RESTART SEND ME TO THE DESKTOP WITH THE ICONS AND MESSAGE

>>60354614
THIS. Fucking phone posting now because my laptop is unusable.

>>60354457
/V/ IS ON SUICIDE WATCH LMAO FUCK WINBABBY /V/TARD FAGGOTS YOU FAT FUCKS GET WHAT YOU DESERVE

>>60354573
It says i can't update it

>>60354630
Yeah, that's what happened. Windows update broke the update functionality, reformatting fixed it for a month and then another update broke it again. System restores did nothing so I gave up.

WHO WILL BE THE FIRST COUNTRY TO FIND THE SCRIPTKIDDIE?

>>60354689
>his laptop is unusable
fucking windows lmao. never change windows

Which updates on windows 8.1 do I need to avoid for telemetry shit?

>>60354553
>may 24th
I can't live a day without internet though

>>60354614
Hah! My windows updates are update as of today so I have disabled mine. I'll run updates again in a week or a few once this has passed.

File: cool.jpg (28KB, 469x409px) Image search: [Google]

28KB, 469x409px

>>60354690
>using windows 7 for muh gaymes
>turned off update years ago
>only found out there was a happening from 4chan

>>60354580
At this rate, it'll be YotLD by the end of 2017.

File: 1429913116262.png (12KB, 100x100px) Image search: [Google]

12KB, 100x100px

funniest thing is whichever kid accidentally got this worm out of control will eventually end up getting about a trillion years in prison

>>60354694
Did you download it for the right windows version? Did you install a later security update for April which basically already contains it?

>>60354705
>Xorg breaks during a routine update
fucking linux lmao. never change linux

>>60354734
hope it's not connected to the internet, or you're next :^)

File: 1494623496892.jpg (23KB, 720x540px) Image search: [Google]

23KB, 720x540px

Guys updated a PC (Windows 10) to the creators update for security.

Now my computer is infected? Thanks a lot assholes.

How do I make a clean install? I have a final tomorrow and I dont really have time to deal with this bullshit.

>some russian BTFOS all W10 cuckolds
seriously lmoaing out loud right now

>>60354752
>xorg doesn't break
>use it for years with no problem
>thousands of windows computers get this exploit all at the same time
nice garbage you got there :^)

>>60354752
Nigga, Xorg aint even default on the two biggest DE's anymore.

Reposting this:
I haven't installed any Windows updates in a while. Got tired of trying to keep track of what was telemetry bullshit and what wasn't. Is there an up to date list of which updates I should avoid?

>>60354736
More 20never

File: Good_Luck_I'm_Behind_7_Proxies.jpg (35KB, 455x300px) Image search: [Google]

35KB, 455x300px

WHO HERE /safe/???

THE CULLING OF THE NORMIES IS HERE

>>60354761
>1494623496892.jpg
Nice original filename.

FUCK I JUST GOT THE VIRUS AND IT INSTALLED GENTOO ON MY SYSTEM OVERWRITING ALL MY FAMILY PICS!!!

HOW DO I RECOVER???

>>60354779
>anecdotal evidence

>>60354746
I guess i did, my w7 is original and it last updated in the morning

REDDIT LIVETHREAD CONFIRMS THAT PATCHES FROM MICROSOFT SERVERS ARE COMPROMISED.

DONT UPDATE
DONT UPDATE
DONT UPDATE
DONT UPDATE

File: 1279791256816.jpg (16KB, 540x307px) Image search: [Google]

16KB, 540x307px

>mfw pirated win7 with all updates disabled running sp1

Come at me Vladimir

>>60354792
Something has to go on all those reformatted PC's and I think a lot of people will think twice about putting Windows on it again.

>>60354594
Still better than shitnux desu

File: 1485918411716.jpg (25KB, 398x397px) Image search: [Google]

25KB, 398x397px

>>60354799
Mac here I'm safe

File: Wanacrypt.jpg (454KB, 1536x2048px) Image search: [Google]

454KB, 1536x2048px

>>60354457
Uhhh guys

>>60354801
Can't print screenshoot or connect to the internet with the computer. It is encrypted you fucking retard.

File: 1.jpg (15KB, 300x300px) Image search: [Google]

15KB, 300x300px

>>60354816
>stopped downloading updates at 97%


how fucked im i

File: Smug_cf1d8a_5762907.jpg (18KB, 372x351px) Image search: [Google]

18KB, 372x351px

>>60354806
>thousands of computers have this ransomware right now, all at the same time
>no such thing ever occurred on any GNU/Linux distro
lmao at your life winpleb

>>60354526
>widespread malware attack against Unix-like OS's
This is already happening. To see it:

1) Setup public facing web server
2) Look at logs

You don't need something to be listening on port 80 for very long before you get dozens and dozens of attempts per hour trying to exploit known vulnerabilities in WordPress and MediaWiki and other commonly used content management systems. The already infected systems attacking you continuously don't care if you're not using those, they just attack everything and anything on the off-chance that it works.

Another experiment you should try, setup a ftp server that allow anonymous as username and password and see how long it takes before all kinds of strange stuff is being uploaded.

File: ss (2017-05-13 at 01.24.01).png (81KB, 960x321px) Image search: [Google]

81KB, 960x321px

How do i find right version update?

PATCHES ARE COMPROMISED
>PATCHES ARE COMPROMISED
PATCHES ARE COMPROMISED
>PATCHES ARE COMPROMISED
PATCHES ARE COMPROMISED
>PATCHES ARE COMPROMISED
PATCHES ARE COMPROMISED
>PATCHES ARE COMPROMISED
PATCHES ARE COMPROMISED
>PATCHES ARE COMPROMISED
PATCHES ARE COMPROMISED
>PATCHES ARE COMPROMISED
PATCHES ARE COMPROMISED
>PATCHES ARE COMPROMISED
PATCHES ARE COMPROMISED
>PATCHES ARE COMPROMISED
PATCHES ARE COMPROMISED
>PATCHES ARE COMPROMISED
PATCHES ARE COMPROMISED
>PATCHES ARE COMPROMISED

DON'T UPGRADE!! INSTALL LINUX QUICK!!

>>60354816
Fuck off.

>>60354819
false. They will only learn 2 things
1. Always do backups
2. Software updates exist for a reason

>>60354816
source?

>>60354839
If you are posting with a phone you still could take a picture.

>>60354852
PATCHES ARE COMPROMISSED.
DONT UPDATE

I'm on win 7 and I use ancile.
Am I ok?

File: 15321526346.jpg (23KB, 600x630px) Image search: [Google]

23KB, 600x630px

>running win7 from 2013 without any updates installed at all

>>60354799
I'm on Windows and I'm fine.

I'm not a poorfag like you who can't afford Windows.

>>60354861
There is no source. Updates are fine.

>>60354816
>>60354856
>FUD

>>60354866
>>60354823

>>60354874
Just don't be a dumbass. It's not like you can magically get malware shitposting on 4chan.

>>60354553
>Today, May 12th 2017, WikiLeaks publishes "AfterMidnight" and "Assassin", two CIA malware frameworks for the Microsoft Windows platform.

>"AfterMidnight" allows operators to dynamically load and execute malware payloads on a target machine. The main controller disguises as a self-persisting Windows Service DLL and provides secure execution of "Gremlins" via a HTTPS based Listening Post (LP) system called "Octopus".
You may be on to something here.

>>60354799
I just disconnected my fucking computer. Who the fuck is leaving theirs plugged in, for real?

>people who have windows update enabled
they deserve ransomware 2 be honest

>>60354839
Take a pic with your phone and timestamp

>>60354878
you will be poor soon after paying to have all of your devices decrypted :^)

File: file.png (366KB, 1465x806px) Image search: [Google]

366KB, 1465x806px

>mfw some scriptkiddie caused one of the biggest shitstorms of our times

>>60354823
how did it even get into your network?
do you have 443 publicly open or some shit

File: 1478132750135.png (233KB, 520x423px) Image search: [Google]

233KB, 520x423px

>Installed updates last night after being offline for a week

File: 1342889732622.png (362KB, 476x359px) Image search: [Google]

362KB, 476x359px

>>60354901
>It's not like you can magically get malware shitposting on 4chan.

Reminder that anyone, ANYONE that uses muh games as an excuse for using wangblows is LITERALLY putting their enjoyment of pretending to shoot guns or jump on platforms above of every single file on their computer

File: f.png (33KB, 540x214px) Image search: [Google]

33KB, 540x214px

>>60354544
this

>>60354871
aint /g/ got mods?
del & banish these fuckers already, people on here for advice.

>>60354915
I can afford it because I'm not a poorfag like you.

>>60354919
>Penguins don't have any ransomware infection yet.
NORMIES BTFO

>>60354856
>Today, May 12th 2017, WikiLeaks publishes "AfterMidnight" and "Assassin", two CIA malware frameworks for the Microsoft Windows platform.

>"AfterMidnight" allows operators to dynamically load and execute malware payloads on a target machine. The main controller disguises as a self-persisting Windows Service DLL and provides secure execution of "Gremlins" via a HTTPS based Listening Post (LP) system called "Octopus".
Yep!!!!!!!!!!!

Thought it was Port 445 you had to be worried about?

>>60354480
Linux is worse.

>>60354919
What are the dots?

>didn't get infected

feels bad man

>14 year old russian destroys W10 and the security narrative microshill has been pushing for months
windows 7 doesnt have this problem

File: 1455580402243.png (737KB, 610x916px) Image search: [Google]

737KB, 610x916px

To all the winfags out there

>>60354799
Arch Linux here

Weaponized autism saved the day

>>60354823
WENDIES HAS BEEN COMPRIMISED!???!?

REMINDER:
>The WinMain of this executable first tries to connect to the website www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com. It doesn’t actually download anything there, just tries to connect. If the connection succeeds, the binary exits.

>This was probably some kind of kill switch or anti-sandbox technique. Whichever it is, it has backfired on the authors of the worm, as the domain has been sinkholed and the host in question now resolves to an IP address that hosts a website. Therefore, nothing will happen on any new systems that runs the executable. This only applies to the binary with the hash listed above; there may well be new versions released in the future.

https://blog.malwarebytes.com/threat-analysis/2017/05/the-worm-that-spreads-wanacrypt0r/

The current threat is already over.

>>60354969
Except it does :^)

>>60354951
sure thing. you're just retarded. have fun with your insecure toy OS. you deserve everything that happens

File: 1493760091771.png (146KB, 671x519px) Image search: [Google]

146KB, 671x519px

>still at work
>dont know if i will have it
t. Non-country

File: laptop_speccy.png (97KB, 1280x800px) Image search: [Google]

97KB, 1280x800px

>>60354525
Sorry, I'm not a freetard.

No ransomware here!

>>60354556
>IT guys are at fault here
Yes. If you're a sysadmin and you admit 1000 computers running unpatched exploitable Windows computers then you're at minimum partly to blame.

To their defense, there are some reasons why hospitals got hit. If that half a million dollar x-ray machine only works with Windows XP then that could be problematic. There are a lot of strange equipment in use that require some special Windows version. One solution would be to not connect these things to the network..

>>60354988
fake news

>>60354976
>>60354884
>>60354768
I'm not even a winbabby but you should stop posting this cringey shit.

>>60354823
>>60354984

HOW AM I SUPPOSED TO GET MY TENDIES NOW

>>60354799
/linux/ here.

File: images(7).jpg (7KB, 259x194px) Image search: [Google]

7KB, 259x194px

I hope you're ready for the new dark age.
Normies will be left behind vy evolution.

I'm on Windows 10 and deleted all the bloatware and turned off updates months ago.

>>60354995
Ransomware doesn't target toasters or rocks.

File: 17626129_427669387585151_8481782979075242412_n.jpg (35KB, 680x699px) Image search: [Google]

35KB, 680x699px

Am I /safe/ if I switched to my linux partition on main PC and have all my data stored in a Centos home server?

Could the server get rekt if the windows partition gets infected?

>>60354986
Well that sucks.

>>60354923
No, my ISP blocks port forwarding. but how?

>>60354986
rip

>>60354946
/g/ isnt really for tech support. its in the sticky.

>>60354995
you look like you're just a retard.

>>60354799
Win 7 never updated here, perfectly fine and safe, because I'm not a FUCKING RETARD and know that nothing can get through a simple, cheap router

>>60354614
FAKE NEWS

>>60354995
nashe radio is great

how exactly is this shit spreading

>>60354986
REEEEEEEEEEEEEEEEEEEEEE

HOW DO I AVOID GETTING INFECTED? Clearly it's more than just downloading the wrong file or opening the wrong email. I have nothing to backup my laptop with and I can't afford to lose my shit. What do I do to ensure I'm safe? I'm yet to see a explanation for what people do to actually get the ransomware.

>>60355013
how could you be using windows 10 if you deleted it months ago?

>use GNU/Linux and mother uses macOS
>router runs custom Linux firmware with proper firewall and even adblock

Feels good having an iron fortress for a home network

File: 1457134210976.jpg (364KB, 813x530px) Image search: [Google]

364KB, 813x530px

>>60355008

>>60354818
This and I don't give a fuck I don't even have an Antivirus

>>60355045
Pray that your ISP doesnt get infected via p2p by some retard.

So what is going on can I get a quick rundown?

I have two desktops running windows10 just cause games. I can just dc my desktop and do everything from Linux on my laptop for however long this blows over.

>>60354818
doesn't this make you more vulnerable?

>>60354986
so a decryption will be released soon??

>>60354799
This doesn't affect home users, freetard. Only PCs that can be controlled remotely, like in a company network.

The NHS computers were using Windows XP. So they were asking for it.

It's not normies that are being hit here, because this shit will have to be fixed by IT employees. And your grumps will probably have to miss her appointment for treating that foot fungus.

>>60355045
Dual boot with Linux until this blows over.

>>60355041
one of best radio stations in russia that's for sure.

the new carprice.ru ads are cancer though

>>60355026
ah right, 'which brand of headphones shoudda buy today, /g/?' and shit ONLY, gotcha. My mistake.

>>60354986
>not using tor to connect to your botnet servers

>>60355085
Hahahahahaha sure. See you in 10 years

So does this just attack the users folder or does it look elsewhere?

I've kept all my files on a d: partition since 1997. My Documents is fer faggots.

>>60355075
Don't connect anything running Windows to the internet, for a couple weeks to be sure.

File: TrumpOS.jpg (118KB, 602x500px) Image search: [Google]

118KB, 602x500px

Time to build that firewall

File: 1.jpg (190KB, 625x419px) Image search: [Google]

190KB, 625x419px

Russian MOD and MOI was just hit


SHUT IT DOWN!!!!

>>60354963
people crying at this moment

>>60355085
Hope you got 300 bucks

>>60354986
Already done the damage. NHS cutting services because of it, by itself, is enough collateral for some simple ransomware.

Guys I updated my windows 10 three weeks ago and I always have the auto searches and auto updates disabled. Am I safe?

File: 85524.jpg (208KB, 825x464px) Image search: [Google]

208KB, 825x464px

Time to go full Battlestar Galactica mode.

File: makeitgreat.png (54KB, 668x825px) Image search: [Google]

54KB, 668x825px

>>60355114

>>60355120
>mainly american and europe
yeah that'd be right, fucking crybabies

File: one happy hound.jpg (41KB, 480x640px) Image search: [Google]

41KB, 480x640px

>my computer updated two days ago, leaving me very pissed
my fucking god the one time i am thankful for auto updates

>>60354614
>>60354614
Jokes on you i only turn on the wuauserv service when i need to get new mse definitions (otherwise it's causing the svchost to go haywire constantly)

>>60355105
>>60355125

I posted this >>60354823
am I finished? pay up??

>>60355136
yes, faggot

>literally no one on /g/ saying they got infected
fake news

i really wanted to get my VM infected with this but no luck

how in the fuck do normies get infected so easily?

im running win XP on my VM and still no luck, i got 30 worms and viruses but not this shit

>>60355085
lmao

>>60355045
Honestly if you're using nonfree software you deserve to lose everything.

>>60355001
>Windows XP
doesn't this ransomware rely on the recent remote exploit in windows defender that only works on w8 to 10 ?
am i mixing everything up ?

>>60355098
I think hidden service records are stored centrally

File: telefonica.png (38KB, 1365x738px) Image search: [Google]

38KB, 1365x738px

telefonica's website right now

>>60355158
Because /g/ is not full of retards?

>>60355113
I have a VPN on my main comp but thats probably not safe is it?

>>60355152
Yeah. Ask them if they accept fake tv projecting a bonfire as payment.

>>60355166
why? If you're paying for it, you deserve a little more security. You would think that it's the free software that would get hit.

>>60355169
everything that uses samba is compromised.
Linux is not a exception.

File: base.jpg (80KB, 960x540px) Image search: [Google]

80KB, 960x540px

>>60354457

ALL UR BASE ARE BELONG TO US

>>60355008
Why contain it?

>>60355163
map port 445 on your router/firewall from the internet to that machine

So what do i do to not get infected with this? i'm on windows 8.1.
Do i just update?

>>60355045
literally back it up to google drive or dropbox using multiple accounts if it is THAT important.

>>60355180
lel

>>60355180
>/g/ is not full of retards
Did you even read the threads?

>>60354907
Neither of these sound like expoits. There's no way for them to get on your PC without an exploit vector.

>>60354990
Stay poor and mad, linux fag.

Daily reminder to back up your important shit to m-discs folks.

>>60355192
>Linux is not a exception

WRONG

File: 1494619126030.png (19KB, 300x250px) Image search: [Google]

19KB, 300x250px

>>60354799
>>60354799
>When your router is a quality model that you hand-picked and configured urself which has a built-in firewall and everything

>>60355202
Patches are compromised

File: 1489476313224.jpg (48KB, 488x668px) Image search: [Google]

48KB, 488x668px

>>60355180

I don't fucking know anymore, should I update or not?

Captcha: access stop
lol

File: Guhnoo Car.jpg (168KB, 576x764px) Image search: [Google]

168KB, 576x764px

>>60354457
>Area 11 decimated
>Madagascar is safe

File: 1400887320982.jpg (26KB, 327x316px) Image search: [Google]

26KB, 327x316px

>he is not using windows 10
>he disabled updates

File: ackbar_2.jpg (38KB, 288x374px) Image search: [Google]

38KB, 288x374px

>>60355149
>i am thankful for auto updates

>>60355149
Hahah, shit. Same here, got an update on Thursday, was a little pissed about my machine having rebooted while I was gone.

>>60355202
If you are up to date then you are fine, else see >>60354573 if you don't update.

>>60355200
wait... you can get infected by just having port 445 open?


you dont have to download or click on anything? i refuse to belive this

>>60355216
>poor
be honest, you pirated that garbage OS.

>>60355218
who the fuck are you?
Also can you at least make an attempt at being relevant to a thread for once. Christ sake you cant even shitpoast correctly

>>60355220
woah, you CONFIGURED THE ROUTER BY YOURSELF?? we got hackerman over here!

>>60354457
macOS doesn't have this problem :^]

>>60355183
Of course not if you have still connected the computers with winmalware10

You'd think they'd make the UI a little more sinister right?

>>60354511
windows update mini tool

thank me later

File: 1414940537518.jpg (18KB, 429x410px) Image search: [Google]

18KB, 429x410px

>>60355176

how do i patch this without upgrading to spyware 10

File: eyJ1cmwiOiJodHRwczovL2Rpc2NvcmQuc3RvcmFnZS5nb29nbGVhcGlzLmNvbS9hdHRhY2htZW50cy8xNTExNTExODUxOTYyMjA0MTYvMzEyNjI0MzQ2MjM5ODYwNzM3L0NhcHR1cmUuUE5HIn0.png (179KB, 1023x659px) Image search: [Google]

179KB, 1023x659px

>>60355169
It relies on running an EXE file, so some dumbass still has to download it and run it.

>>60354901
>Just don't be a dumbass.
you have literally no idea what an exploit is

can someone link me to download this shit?

i want to get infected

>>60355279
What's this?

File: C_qeJFPV0AAMBqW.jpg (159KB, 900x1200px) Image search: [Google]

159KB, 900x1200px

German airport

>>60355259
only Windows does

>>60355293
>digital bugchasing
You find something new every day.

File: 1464319772882.jpg (13KB, 283x188px) Image search: [Google]

13KB, 283x188px

>>60355176

Why are you guys freaking out? Nothing to fear nothing to hide.

>>60355247
If is on your network after being initiated then you don't need to do anything and it will spread with no extra input. It is a SMB vulnerability which uses port 445.
If you have it disabled then it will do nothing.

>>60355247
>After initializing the functionality used by the worm, two threads are created. The first thread scans hosts on the LAN. The second thread gets created 128 times and scans hosts on the wider Internet.
>...
>The threads that scan the Internet generate a random IP address, using either the OS’s cryptographically secure pseudo-random number generator initialized earlier, or a weaker pseudo-random number generator if the CSPRNG failed to initialize. If connection to port 445 on that random IP address succeeds, the entire /24 range is scanned, and if port 445 is open, exploit attempts are made. This time, exploitation timeout for each IP happens not after 10 minutes but after one hour.

tl;dr Yes

>>60354573
Or just disable SMB completely as the article says. That should be enough for now.

>>60355248
That would be eel eagle.

I paid full price at an upper class electronics store.

>is this exploit attacking ports
>or is it an executable that attacks networks it's already in?

File: 007793.png (62KB, 414x248px) Image search: [Google]

62KB, 414x248px

>>60355302
This is fucking brilliant
The world is on fire, and history is writing itself as we speak, and it's all because of fags like 'hurr durr who needs updates'

TANKS IN 30 MINUTES

TANKS IN 30 MINUTES

TANKS IN 30 MINUTES

TANKS IN 30 MINUTES

TANKS IN 30 MINUTES

>>60355344
no you didn't. winfags are just fat virgins too stupid for Linux but too poor for macs.

>>60355302
>>60355176
Well, now I am excited to see the total damage

>>60355323
What does that have to do with anything?

CAN YOU GET INFECTED WITHOUT CLICKING ON A .EXE???

CAN YOU GET INFECTED WITHOUT CLICKING ON A .EXE???

CAN YOU GET INFECTED WITHOUT CLICKING ON A .EXE???

can someone answer pls?

>>60355351
waiting for nukes here

>>60354761
you can download any windows through microsoft's site and if you have OEM, get the same version (even same language) that you had and it should activate on its own

if you are tight on time it should be better to get a live linux distro to access internet and stuff and after finals trouble yourself as it should take at least more than an hour to install windows

>>60355336
how do i do that in w7?

>>60355023
>my ISP blocks port forwarding

what?

>>60355370
yes

File: 1456014099599.png (67KB, 449x1197px) Image search: [Google]

67KB, 449x1197px

>>60355351
>mfw this sounds like C&C Generals

File: 1455466038251.png (112KB, 294x256px) Image search: [Google]

112KB, 294x256px

just imagine how rich they will get from this
even if only 1% pay the ransom

>>60355259
Because it's so shitty not even viruses can work properly on it

WHY DOES MY COMPUTER BREAK AND START FLASHING AND BECOME UNRESPONSIVE WHEN I UPDATE REEEEEEEEEEEEEEEEE

>>60355071
important isp hardware does not run windows.

>>60355323
That's completely irrelevant.
This is an encryption ransomware. Losing access to your date and shit.

>>60355370
if you are at home, no

>>60354737
they'll probably get his server with all the keys, torture him for a few days and then shot him somewhere without the public knowing.

this isn't even a computer genius who can help with system security in exchange for his life, is just an idiot who deliberately made a mess for money.

>>60355370
This.
Disconnected my pc from internet, posting on phone right now.
Also I'm on win7.

File: Hackers.png (123KB, 280x300px) Image search: [Google]

123KB, 280x300px

:^)

>>60355348
More like

>"Hurr what do you mean our organization doesn't have to use Windows? Macs are expensive!"

How is this virus spreading? Is it just grandmas clicking "gransonsphotos.exe" or?

>>60355255
m-discs are the safest form of back up you retarded faggot

So what happened exactly?

WIN 7 faggots just do this to be 100% safe

Start the registry editor (regedit.exe).
Move to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters.
From the Edit menu, select New, DWORD value.
Enter a name of Smb2 and press Enter.
Double-click the new value and set to 0 to disable SMB 2. Set to 1 to enable.
Reboot the machine.

>>60355406
It doesnt need to in order to become a host and distribute it

File: fishabouttobite1.jpg (54KB, 600x600px) Image search: [Google]

54KB, 600x600px

>>60354614
just updated my windows about 30 minutes ago

File: first post best post g.jpg (134KB, 800x850px) Image search: [Google]

134KB, 800x850px

>>60354480
fpbp

Installing the march update now, wish me luck lads

>>60354525
Why don't you fuck off?
Wake up. No one will ever use linux unless it is somewhat user friendly. Things simply don't work unless you spend hours trying to search the internet helplessly for fixes and then those solutions don't even work. Linux is shit. Get over it.

>get a gorillion butcoins
>actively hunted by GCHQ/NSA/FSB/Chink security service/Mossad and some mercenaries the corporations that were infected hired

Not for a million bitcoins is it worth it

>>60355428
someone tell me how it's spreading so I can try it in a virtual machine and laugh at the winfag tech illiterates

do i need to call my fucking isp provider and ask if they are ok

>>60355302
lotta trains there, for an airport? Better train departure board than flight control tho, ah spose.

>>60355379
Use "turn windows features on or off" and uncheck the boxs next to the SMB stuff.

close port 445 now!

So all i need to do is block port 455?

I haven't updated windows 7 in 3 years and I'm not seeing any ransomware.
Am I fucked?

>>60355428
its an actual virus, it uses NSA windows backdoor to automagically spread. Once its on a network, its only a matter of time before every windows machine (that isn't updated) on the network has it.

>>60354457
Out of all the fucked up places, it has to be hospitals that can save your life. Not the smartest move

>>60355433
E-mails contained an encrypted attached file that once opened would infect users with the ransomware.

Probably free_HD_games.jpg.mp4.exe

>>60355400
you fucking retard windows update services has been infected

ABORT!!
>ABORT!!!

>>60355449
>no one will ever use linux
wrong, people who aren't fucking retarded use it, and are thus unaffected by shit like this and get to laugh at you, as you deserve.

>>60355176
are they using java on that website?

So this worm can't do anything if I disabled SMB v1?

One of my laptops doesn't have the option nor the registry key for it for some reason.

>>60355463
photo stolen from twitter

File: worm_scan_lan.png (8KB, 481x302px) Image search: [Google]

8KB, 481x302px

>After initializing the functionality used by the worm, two threads are created. The first thread scans hosts on the LAN. The second thread gets created 128 times and scans hosts on the wider Internet.

File: og.jpg (31KB, 1200x630px) Image search: [Google]

31KB, 1200x630px

Who else here comfy?

How long does it take to check for updates if you haven't done it in awhile?

>>60354986
>the domain has been sinkholed and the host in question now resolves to an IP address that hosts a website
What does this mean? Why doesn't it work anymore?

What the fuck is going on? I just shut off my windows oblivious of all, heading to sleep
Is this something big? How does it spread

>>60355468
Just don't be a retard and be careful of what email attachments you open.

This ransomware encrypted itself so virus scanners are useless.

File: mate.png (70KB, 713x350px) Image search: [Google]

70KB, 713x350px

>>60355143
is this the new screenfetch thread?

how 2 block port 445 on windows 7?

pls help i dont kow anything about computers im a dumb /v/irgin i just play vidya and watch anime

>>60355472
Sure. Anyway. I heard you were trying to take your pics with the bad dragon dildos off the internet. How's that going fattie?

>>60355502
Oh I don't use emails so I should be fine.
Thanks anon.

>>60355493
Sorry, we're not gay like you.

>2.5 gigs of updates

yeah fuck it

>>60355497
>be tech illiterate
>use windows (because you're tech illiterate)
>get infected like you deserve (see the first two meme arrows)

>>60355396
https://pastebin.com/hy08Eypi

let's see

holy shit the internet is colapsin-

File: Sketch.png (87KB, 958x180px) Image search: [Google]

87KB, 958x180px

>>60355335
Sure, if you are so dumb to keep port 445 open...

And not block it in the router too...

File: worm_scan_inet_part1.png (16KB, 876x499px) Image search: [Google]

16KB, 876x499px

>>60355492
>The threads that scan the Internet generate a random IP address, using either the OS’s cryptographically secure pseudo-random number generator initialized earlier, or a weaker pseudo-random number generator if the CSPRNG failed to initialize. If connection to port 445 on that random IP address succeeds, the entire /24 range is scanned, and if port 445 is open, exploit attempts are made. This time, exploitation timeout for each IP happens not after 10 minutes but after one hour.

How do I get the ransomware exactly? Do I have to run something?

I would update but my windows has literally been searching for about 6 months now

>>60355514
>>60355512
Lmao

>tripfag
>has pictures with dildos
Praise kek

File: HeFuckedYourMom.jpg (4KB, 200x137px) Image search: [Google]

4KB, 200x137px

>>60355514
Windows is in fact the gayest OS anon.

respond to this post or your mom will be encrypted in her sleep

>>60355516
I play vidya you cucklord, I'm just here for chink shit and headphones

>>60355564
delete this

this just caught company/public right? so why are people do people panic here?

>>60355509
>how2block 445?
>http://www.thewindowsclub.com/block-open-port-windows-8-firewall
walkthrough for Win 8, but same/similar for 7.

File: 1485229894049.png (28KB, 321x322px) Image search: [Google]

28KB, 321x322px

>>60355564

>>60355529
so the chances of getting this shit is 0.0001%

only if your on a infected LAN network your fucked

>>60355233
>he thinks samba1 isn't turned on win10 by default
lol

>>60355566
WINE works great with every Windows game worth running in history, the only excuse for running actual Windows is you're retarded.

>>60355396
Only about 30 transactions so far for known bitcoin addresses. Not worth the heat they are getting, all the world's cyberpolice is after the kids now.

>>60355513
If someone else on your network does you can still get infected since it spreads across the network once started.

>>60355566
good, hope your computer gets hit. stay on /v/ fag

>>60355496
It checks to see if there's a website there, and doesn't run if there is.

Someone made a website. So it no longer runs.

Everyone already infected is still infected, but anyone they spread it to won't be.

>>60355529
>>60355587
explain to me how it gets past my router

>>60355578
It catches everyone in the same network.
So if a company gets infected, all the PCs in it gets it.

If your mom gets it, you get it from her.

>>60355598
>implying i'd go to /v/

I want to deliberately infect my computer with this, how do?

>>60355578
No.
Learn and educate yourself.
You can get it by using public wifi, having your isp distributing it via p2p, lan networks or vpn

>>60355546
Just manually update it with >>60354573

>UPDATE UPDATE UPDATE
I was wrong, oh so very wrong.

>"Unlike many other malicious programs, this one has the ability to move around a network by itself. Most others rely on humans to spread by tricking them into clicking on an attachment harbouring the attack code.

>By contrast, once WannaCry is inside an organisation it will hunt down vulnerable machines and infect them too. This perhaps explains why its impact is so public - because large numbers of machines at each victim organisation are being compromised."

http://www.bbc.com/news/technology-39901382

HOLY FUCKING SHIT.

>>60355602
it doesn't

File: 1479923982522.jpg (22KB, 480x481px) Image search: [Google]

22KB, 480x481px

I'm going to have a panic attack if someone doesn't reply to me.
What do I need to do on windows 7 to be secure?
I have all updates disabled since free win 10 release.

>>60355597
Oh fuck my family is full of retards and i'm connected by ethernet.
thanks again anon.

>>60355615
>>60355615
>>60355615
>>60355615
>>60355615

NEW GENERAL

disable ads and click on every one you see

>>60355610
from everything you've said, you actually sound like a typical /v/tard. memes aside, you might actually like it

>>60355612

Go to a hospital and bring a flash drive ^___^

How in ten million fucks do I get infected? I want to do it.

>>60355601
Until they reactivate the website and the worm gets activated.

Remember you are hosting it, even if it's not active it still works.

I closed the port but I literally can't update my computer or it'll brick. I backed my shit up anyway but am I gonna get this thing?

>>60355472
This shit always happens.

How hard is it not to fucking open EVERY

SINGLE

ATTACHMENT

FUCK

>>60355437
i have no problem with that as long as i can shitpost

My computer just downloaded an update earlier today and I put off the restart.
Is it safe to reboot or do I need to leave my computer running for the rest of my life now?

Mfw trying to install the exploit fix from march but it's been stuck on initializing for 3 minutes now

Guys i'm scared

>>60355630

https://www.askwoody.com/2017/if-you-didnt-get-ms17-010-installed-six-weeks-ago-you-may-be-hurting-now/

>>60355630
do what >>60355435 said
but if you're on your home network and haven't explicitly configured your router to forward ports there's no chance of getting infected

>>60355615
>>60355615
>>60355615
>>60355615
>>60355615

NEW

>>60355370
yes, there are other ways of infecting
just avoid .exes, emails and disable js for a bit

File: 1492916425257.jpg (17KB, 473x357px) Image search: [Google]

17KB, 473x357px

Is it port 445 or 455? Should I close both? Please reply

>>60355666
nobody knows

>>60355451
Someone opens an email attachment and gets compromised then from there it spreads throughout the network.

>>60355668
>>60355668
Alright fuck it i've cancelled now, didn't seem to have downloaded anything though so i should be good

Will try again later when the clusterfuck has been resolved

>Win 7 SP1
>got some updates here and there
>didn't got hacked
feels gud man

>>60355625
Yup. NSA got some diabolical tech there. I wonder how they're gonna spin it.

>tfw just remembered my normalfag sister and mom have laptops with Windows 7 and 10, probably not updated

>>60355589
Can I run my non-english weeb games under WINE?

>>60355679
I did forward a random port for a certain software a while ago.

File: psa.jpg (38KB, 416x368px) Image search: [Google]

38KB, 416x368px

REMINDER TO TURN OFF PURBLE PLACE ! ! ! IT HAS VULNERABILITIES TO THE EXPLOIT!!!

>>60355564
I'm happy my mom uses linux

>>60354945
>openSUSE
>transparent hideous terminal
GTFO please.

>>60354525
Get the fuck off this fucking board. Kys.

File: brain.jpg (39KB, 600x367px) Image search: [Google]

39KB, 600x367px

>>60354992
>Plugging the mouse into the USB 3 ports
At last I truly see

>>60355705
I'm definitely going to be getting a call from my sister tomorrow. It wasn't that long ago I had to delete a shit ton of malware off her computer.

>>60355775
too lazy to fix it. it just happened when i installed compton.

>>60355709
of course

>>60355480
If you have to use a terminal it's a shit operating system. Fucking lincucks.

>>60355021
If your windows has write permission to your SMB then you can be at risk.

Make data you don't need to modify read only from windows.

>>60355279
basically what windows update does is checking for a list of available and installed MSIs and install what's available, but in an overcomplicated way that never works. it is so simple that you can download the updates by yourself and yet it can't update the machine.

what this program does (and it very well trusted if you search) is to search and download the same updates on the same microsoft servers and install it, just faster and more reliably.

File: gustavo-fring.jpg (21KB, 590x333px) Image search: [Google]

21KB, 590x333px

>>60354946
>people on here for advice

>>60354457
How do these retards get infected.
How much of a fucking dumbass do you have to be to have a Windows machine on the open internet.
What a bunch of retards.

>trying to manually install update
>windows standalone installer freezes on "searching for updates on this computer"
what do

>>60354986
>ally download anything there, just tries to conne
what about those intranets who can't access that website? or even networks that only allow whitelisted domains?

File: 1494628511880.png (297KB, 634x764px) Image search: [Google]

297KB, 634x764px

>>60355830
Keep repeating this, you just sound dumber and dumber anon.

BTW the hot Windows fix for this today involves having to use a terminal to edit the Registry, top fucking kek.

>>60355864
Spread inside the NHS networks like wildfire once some dumb cunt clicked the wrong thing one time anon.

It's a Windows issue, monocultures like that aren't healthy. Need more vibrant diversity in your network.

>>60354856
I hope this is true. I work at microsoft and it would be pretty glorious to go to work monday and see everyone cryptofucked while I'm all good since I use a linux laptop and ssh into our local linux cluster for work.

File: 1494101647964.jpg (116KB, 400x800px) Image search: [Google]

116KB, 400x800px

>>60355830
Legit curious.
Why are you afraid of terminal?

Just today I took a disk image of my HDD and piped it into gzip compression to make a whole disk backup to two locations on the fly with a single line while I played a few matches of PA.

>>60355892
Then they could still be infected.

But I won't be. And at the end of the day, that's all that matters.

>>60355937
Oh it's be the funniest fucking thing of all time.

MS owned, serving bad patches, etc. Strong sell right now on the interday?

>>60355967
People from India aren't capable of using a terminal anon.

File: mfs they still use fossil fuel.jpg (315KB, 1393x838px) Image search: [Google]

315KB, 1393x838px

>>60355937
>our local linux cluster
Have they tried their dogfood recently?

File: 084[1].png (298KB, 600x512px) Image search: [Google]

298KB, 600x512px

>>60354457
>implying someone dumb enough to get this shit is also smart enough to use bitcoin

???????????????????????