[_woland_]

А можно взять и прочитать, что вирус эксплуатирует давнюю уязвимость, которая закрывается... сюрприз... обновлением MS17-010

Цитата: Situation Summary This Unit 42 blog provides an update on the threat situation surrounding attacks using the Petya Ransomware which are impacting organizations in Ukraine and other parts of Europe. On June 27th, 2017 we became aware of a new variant of the Petya malware which is spreading over the Microsoft Windows SMB protocol. The malware appears to use the ETERNALBLUE exploit tool to accomplish this. This is the same exploit the WanaCrypt0r/WanaCry malware exploited to spread globally in May, 2017. Multiple organizations have reported network outages, including government and critical infrastructure operators. Palo Alto Networks is documenting our prevention capabilities with regard to this threat in the Palo Alto Networks Protections for Petya Ransomware blog post. Windows users should take the following general steps to protect themselves: Apply security updates in MS17-010 Block inbound connections on TCP Port 445 Create and maintain good back-ups so that if an infection occurs, you can restore your data. ... Petya finally attempts to use the ETERNALBLUE exploit tool against hosts on the local subnet. This will only be successful if the targeted host does not have the MS17-010 patches deployed.

https://researchcenter.paloaltonetwo...ya-ransomware/

Цитата: Microsoft Security Bulletin MS17-010 - Critical Security Update for Microsoft Windows SMB Server (4013389) Published: March 14, 2017

https://technet.microsoft.com/en-us/.../ms17-010.aspx


Ой. Простите... не у всех хорошо с чтением первоисточников в оригинале.
Но уже есть адаптированная версия "от СБУ". На русском:
https://censor.net.ua/news/445674/sb...usavymogatelya