How to Enable the NotPetya/Petna/Petya Vaccine
To vaccinate your computer so that you are unable to get infected with the current strain of NotPetya/Petya/Petna (yeah, this naming is annoying), simply create a file called perfc in the C:\Windows folder and make it read only. For those who want a quick and easy way to perform this task, Lawrence Abrams has created a batch file that performs this step for you.
Source: https://www.bleepingcomputer.com/news/security/vaccine-not-killswitch-found-...
Thanks Ted!
-----Original Message----- From: ProfoxTech [mailto:profoxtech-bounces@leafe.com] On Behalf Of Ted Roche Sent: Wednesday, June 28, 2017 10:55 AM To: profoxtech@leafe.com Subject: [NF] Latest Ransomware "vaccine"
How to Enable the NotPetya/Petna/Petya Vaccine
To vaccinate your computer so that you are unable to get infected with the current strain of NotPetya/Petya/Petna (yeah, this naming is annoying), simply create a file called perfc in the C:\Windows folder and make it read only. For those who want a quick and easy way to perform this task, Lawrence Abrams has created a batch file that performs this step for you.
Source: https://www.bleepingcomputer.com/news/security/vaccine-not-killswitch-found- for-petya-notpetya-ransomware-outbreak/
-- Ted Roche Ted Roche & Associates, LLC http://www.tedroche.com
[excessive quoting removed by server]
Ted - interesting info.
Our CTO here at my job sent out a co. wide email last night warning about this new Petya Ransomware - warning EVERYBODY Not to just Open email attachments unless they are absolutely SURE they are safe. So - I just forwarded your posting below to him and our Network dept. - in case they want to try and implement the suggestion.
So - thanks for giving us the heads-up!
Regards, Kurt Wendt Senior Systems Analyst
Tel. +1-212-747-9100 www.GlobeTax.com
-----Original Message----- From: ProfoxTech [mailto:profoxtech-bounces@leafe.com] On Behalf Of Ted Roche Sent: Wednesday, June 28, 2017 11:55 AM To: profoxtech@leafe.com Subject: [NF] Latest Ransomware "vaccine"
How to Enable the NotPetya/Petna/Petya Vaccine
To vaccinate your computer so that you are unable to get infected with the current strain of NotPetya/Petya/Petna (yeah, this naming is annoying), simply create a file called perfc in the C:\Windows folder and make it read only. For those who want a quick and easy way to perform this task, Lawrence Abrams has created a batch file that performs this step for you.
Source: https://www.bleepingcomputer.com/news/security/vaccine-not-killswitch-found-...
-- Ted Roche Ted Roche & Associates, LLC http://www.tedroche.com
[excessive quoting removed by server]
Our security guy said that Symantec had it covered yesterday and all you had to do was download it and push it to all employees.
On Wed, Jun 28, 2017 at 1:16 PM, Kurt Wendt Kurt_Wendt@globetax.com wrote:
Ted - interesting info.
Our CTO here at my job sent out a co. wide email last night warning about this new Petya Ransomware - warning EVERYBODY Not to just Open email attachments unless they are absolutely SURE they are safe. So - I just forwarded your posting below to him and our Network dept. - in case they want to try and implement the suggestion.
So - thanks for giving us the heads-up!
Regards, Kurt Wendt Senior Systems Analyst
Tel. +1-212-747-9100 www.GlobeTax.com
-----Original Message----- From: ProfoxTech [mailto:profoxtech-bounces@leafe.com] On Behalf Of Ted Roche Sent: Wednesday, June 28, 2017 11:55 AM To: profoxtech@leafe.com Subject: [NF] Latest Ransomware "vaccine"
How to Enable the NotPetya/Petna/Petya Vaccine
To vaccinate your computer so that you are unable to get infected with the current strain of NotPetya/Petya/Petna (yeah, this naming is annoying), simply create a file called perfc in the C:\Windows folder and make it read only. For those who want a quick and easy way to perform this task, Lawrence Abrams has created a batch file that performs this step for you.
Source: https://www.bleepingcomputer.com/news/security/vaccine-not- killswitch-found-for-petya-notpetya-ransomware-outbreak/
-- Ted Roche Ted Roche & Associates, LLC http://www.tedroche.com
[excessive quoting removed by server]