05-15-2017 , 08:26 PM
https://www.microsoft.com/security/porta...WannaCrypt Malware Protection Center
Search Malware Protection Center
HomeSecurity softwareThreat encyclopediaOur researchHelpDevelopers
Ransom: Win32/WannaCrypt
Also detected as: WORM_WCRY.A (Trend Micro), Trojan.Ransom.WannaCryptor.H (BitDefender), Trojan/Win32.WannaCryptor (AhnLab),
Ransom:Win32/WannaCrypt
Alert level: Severe First published: May 12, 2017
Latest published: May 15, 2017
Summary
What to do now
Technical
information
Symptoms
Windows Defender AV detects and removes this threat.
This ransomware can stop you from using your PC or accessing your data. Unlike other ransomware, however, this threat has worm capabilities. It uses an exploit code for a patched SMB vulnerability, CVE-2017-0145. This vulnerability was fixed in security bulletin MS17-010, which was released on March 14, 2017. We remind all customers to keep computers up-to-date.
The exploit code used by this threat to spread to other computers was designed to work only against unpatched Windows 7 and Windows Server 2008 (or earlier OS) systems. The exploit does not affect Windows 10 PCs.
For more information about this ransomware (which is also known as WannaCrypt, WannaCry, WanaCrypt0r, WCrypt, or WCRY), you can read this entry on the Windows Security blog:
WannaCrypt ransomware worm targets out-of-date systems.
You can also read more on our ransomware page.
Find out ways that malware can get on your PC.
Search Malware Protection Center
HomeSecurity softwareThreat encyclopediaOur researchHelpDevelopers
Ransom: Win32/WannaCrypt
Also detected as: WORM_WCRY.A (Trend Micro), Trojan.Ransom.WannaCryptor.H (BitDefender), Trojan/Win32.WannaCryptor (AhnLab),
Ransom:Win32/WannaCrypt
Alert level: Severe First published: May 12, 2017
Latest published: May 15, 2017
Summary
What to do now
Technical
information
Symptoms
Windows Defender AV detects and removes this threat.
This ransomware can stop you from using your PC or accessing your data. Unlike other ransomware, however, this threat has worm capabilities. It uses an exploit code for a patched SMB vulnerability, CVE-2017-0145. This vulnerability was fixed in security bulletin MS17-010, which was released on March 14, 2017. We remind all customers to keep computers up-to-date.
The exploit code used by this threat to spread to other computers was designed to work only against unpatched Windows 7 and Windows Server 2008 (or earlier OS) systems. The exploit does not affect Windows 10 PCs.
For more information about this ransomware (which is also known as WannaCrypt, WannaCry, WanaCrypt0r, WCrypt, or WCRY), you can read this entry on the Windows Security blog:
WannaCrypt ransomware worm targets out-of-date systems.
You can also read more on our ransomware page.
Find out ways that malware can get on your PC.