win7系统防止中招勒索病毒

echo @@

netsh advfirewall firewall add rule name="Deny TCP 123" dir=out action=block protocol=TCP localport=123

netsh advfirewall firewall add rule name="Deny UDP 123" dir=out action=block protocol=UDP localport=123

netsh advfirewall firewall add rule name="Deny TCP 135" dir=out action=block protocol=TCP localport=135

netsh advfirewall firewall add rule name="Deny UDP 135" dir=out action=block protocol=UDP localport=135

netsh advfirewall firewall add rule name="Deny TCP 137" dir=out action=block protocol=TCP localport=137

netsh advfirewall firewall add rule name="Deny UDP 137" dir=out action=block protocol=UDP localport=137

netsh advfirewall firewall add rule name="Deny TCP 138" dir=out action=block protocol=TCP localport=138

netsh advfirewall firewall add rule name="Deny UDP 138" dir=out action=block protocol=UDP localport=138

netsh advfirewall firewall add rule name="Deny TCP 139" dir=out action=block protocol=TCP localport=139

netsh advfirewall firewall add rule name="Deny UDP 139" dir=out action=block protocol=UDP localport=139

netsh advfirewall firewall add rule name="Deny TCP 445" dir=out action=block protocol=TCP localport=445

netsh advfirewall firewall add rule name="Deny UDP 445" dir=out action=block protocol=UDP localport=445

netsh advfirewall firewall add rule name="Deny TCP 3389" dir=out action=block protocol=TCP localport=3389

netsh advfirewall firewall add rule name="Deny UDP 3389" dir=out action=block protocol=UDP localport=3389

end

1、以管理员身份运行“1封端口”文件夹中的bat文件2、根据电脑版本以管理员身份运行“2打补丁”中x64或者x86文件夹中的文件

被勒索病毒感染的机器中文件如下：

任何txt等被加密的文档都是乱码

http://nic.swu.edu.cn/s/nic/gzdt/20190515/3710754.html