"Malware Fix รวมวิธีแก้ปัญหา virus computer โครงการทำดีเพื่อสังคม" "ต้องขออภัยผู้เยี่ยมชมทุกท่านนะครับ ที่เ้ข้ามาแล้ว ไม่ค่อยได้มีการ update หรือทดสอบ virus ตัวใหม่ๆ เนื่องจากภาระหน้าที่การงาน"

Alert


Photobucket
แจ้งเตือนภัย ! Crypt0L0cker (Ransomware)
เข้ารหัสข้อมูลใน คอมพิวเตอร์ กำลังระบาดในไทย
และกำลังระบาดหนักในเกาหลี
ThaiCERT , Crytpo Prevention Tool

*ห้ามจ่ายเงินโดยเด็ดขาด เพราะจะเสียทั่้งเงินและกู้ข้อมูลไม่ได้
รบกวนคนที่เข้ามาอ่านช่วยแชร์ด้วยนะครับ
How to remove Crypt0L0cker

6/29/2558

How to protect against file-encrypting malware (cryptoware) in Kaspersky Internet Security 2015

วิธี set Kaspersky  เพื่อป้องกัน Encrypting malware(Cryptowall)

Cr.Support.kaspersky.com

How to protect against file-encrypting malware (cryptoware) in Kaspersky Internet Security 2015

 To reduce the risk of infection by cryptoviruses and avoid false positives on installation of applications and games, Kaspersky Lab specialists recommend to configure Kaspersky Internet Security 2015:
 1. Create the Protected file types category
In the Application Control settings window, click Manage identity protection
  1. Open Kaspersky Internet Security 2015.
  2. In the lower part of the main application window, click Settings.
  1. In the Settings window, go to the Protection Center section and select Application Control in the right frame.
To configure data protection, open the Application Control settings window
  1. In the Application Control settings window, click Manage identity protection.
  1. In the Digital identity protection window, go to the Identity data tab and select User files.
  2. Click Add category.
Create a category for the User files resource
  1. Create the category under the name Protected file types.
  2. Click OK.
Enter the category name and click OK
  1. Select the Protected file types category and create several subcategories in it (Documents, Images, etc.).
Create categories for different file types
  1. Select the category corresponding to the protected files type (for example, Documents for files with the .doc extension) and click Add.
  2. Instead of the path to the file, enter the mask for the file type: *..
  3. Click OK.
enter the mask for the file type
  1. Add the rest of file types the same way.
  2. Close the Digital identity protection window.
Add file types to each category
 

2. Create rules for applications

Configure the rules for the Protected file types category on access of applications with high and low restrictions:
  1. Open Kaspersky Internet Security 2015.
  2. At the bottom of the main application window, click Settings.
  3. In the Settings window, go to the General section and clear the check box Perform recommended actions automatically.
Disable the automatic protection mode in Kaspersky Internet Security 2015
  1. In the Settings window, go to the Protection Center section and select Application Control in the right frame.
Open the Application Control settings window to create rules for applications
  1. In the Application Control settings window, click Manage applications.
To create a rule for an application, click Manage applications in the Application Control settings window
  1. In the Application management window, select Restrictions.
  2. Right-click the Trusted group and select Details and rules.
Configure rules for applications from the Trusted group
  1. In the Application rules window, go to the Files and system registry tab. Make sure the rule that allows to read, write, create, and delete is set for the Protected file types resource.
  2. Close the Application rules window.
 Make sure the allowing rules are set for trusted applications
  1. Right-click the Low Restricted or High Restricted group and select Details and rules.
  Configure rules for applications from the Low Restricted group
  1. In the Application rules window, go to the Files and system registry tab. Make sure the Prompt for action rule is set on sections Read, Write, Create, and Delete for the Protected file types resource.
  2. Close the Application rules window.
Make sure Prompt for action rule is set for the Low Restricted group
 
3. Enable System Watcher
The System Watcher component in Kaspersky Internet Security 2015 collects data about the actions performed by applications on your computer and submits this information to other components for improved protection. Make sure the System Watcher component is enabled and configure it. When the start of cryptoware or its activity is detected, Kaspersky Internet Security 2015 terminates the process. The file from which the process was started is quarantined.
  
4. Configure Firewall
All network connections on your computer are monitored by Firewall. Firewall assigns a specific status to each connection and applies packet and network rules for filtering network activity depending on that status. Using Firewallblock the Internet access to Low Restricted, High Restricted, and Untrusted applications. This will not allow cryptoware receive unique encryption keys from the Internet, therefore they will not be able to encrypt files.

5. File types

File type Extension
Documents
.doc .docx .pdf
.ppt .pptx .rtf
.odt .odp .ods
.djvu
Images
.jpg .jpeg .bmp
.gif .png .psd
.cdr .dwg .max
.3ds
Archives
.rar .zip .7z
.tar .gz
Multimedia
.avi .mp3 .wav
.mkv .flac .mp4
.mov .wmv
Databases
.mdb .1cd .sqlite
.sql
Other
.kwm .iso .torrent
.php .c .cpp
.pas .cer .key
.pst .lnk

ไม่มีความคิดเห็น:

แสดงความคิดเห็น

Information

==============================================
PeeTechFix >> JupiterFix
==============================================
Photobucket

วิธีใช้งาน : JupiterFix-Win32.PSW.OnlineGames
ท่านสามารถตรวจสอบรายชื่อ Virus ที่โปรแกรม สามารถ Clean ได้ ใน VirusList.txt
-------------------------------------------------------------------------------------
ท่านใดที่ Download PeeTechFix tool ไปใช้แล้วมีปัญหาหรือลบไม่ออก โปรดแจ้งปัญหา ที่ email : MalwareHunter.info@gmail.com ด้วยครับ หรือส่งไฟล์ virus ให้ด้วย จะขอบพระคุณอย่างยิ่ง
-------------------------------------------------------------------------------------
Safemode Recovery (.reg) แก้ปัญหา Virus ลบ Key Safeboot แล้วเข้า safemode ไม่ได้
------------------------------------------------------------------------------------
วิธีแก้ Error message (แก้อาการเปิดไฟล์ .exe ใน USB Drive ไม่ได้)
"Windows cannot open this program because it has been prevented by a software restriction policy. For more information, open Event Viewer or contact your system administrator"
วิธีแก้ ดูที่ link นี้ครับ
-------------------------------------------------------------------------------------
วิธีแก้ MSN /Windows Live Messenger Disconnect (จาก virus OnlineGames)
-------------------------------------------------------------------------------------
How to start Windows in Safe Mode

Popular Posts