Indlela yokuvula ukuvikelwa kwe-ransomware ku-Windows 11

Informatec Digital » Izinsiza » Indlela yokuvula ukuvikelwa kwe-ransomware ku-Windows 11

El i-ransomware isibe ngenye yezinkinga ezinkulu kakhulu Kunoma yimuphi umsebenzisi we-Windows: ibethela amafayela akho, ikhiye ikhompyutha yakho, futhi, ngaphezu kwakho konke, ifuna inkokhelo ukuze iphinde ithole ukufinyelela—inkokhelo engaqinisekisi lutho. I-Windows 11 (kanye ne-Windows 10) inesici esithile sokuxazulula le nkinga, kodwa ikhutshaziwe ngokuzenzakalelayo, futhi udinga ukwazi ukuthi uchofoze kuphi ukuze isebenzele wena.

Kulesi sihloko uzobona Kuyini ngempela ukuvikelwa kwe-Windows ransomware, futhi "Ukufinyelela Kwefolda Elawulwayo" kusebenza kanjani?Indlela yokuyisebenzisa isinyathelo ngesinyathelo ku-Windows 11 kanye ne-Windows 10, ukuthi yimaphi amafolda avikelwe ngokuzenzakalelayo, ukuthi ungawangeza kanjani awakho, ukuthi ungazivumela kanjani izinhlelo zokusebenza ezithile, nokuthi yiziphi ezinye izinyathelo okufanele zisetshenziswe (ukwenza amakhophi agciniwe, izibuyekezo, ukuqonda okuvamile, njll.) ukuze ukwephulwa kwedatha kungonakalisi usuku lwakho.

Iyini i-ransomware futhi kungani iyingozi kangaka?

i-ransomware uhlobo lwe- I-Malware eklanyelwe ukuvimba ukufinyelela kwakho kukhompyutha noma amafayela akho uze ukhokhe "isihlengo". Ngokuvamile ibethela amadokhumenti, izithombe, amavidiyo, futhi ngezinye izikhathi ngisho nohlelo uqobo, ngakho awukwazi ukuvula noma yini evamile.

Lolu hlobo losongo lungafika amawebhusayithi mbumbulu noma angathembekile, ukulanda okuphangiwe, okunamathiselwe kwe-imeyili okusolisayoamawebhusayithi nama-imeyili anobungozi angatholakala ngezixhumanisi ezinkundleni zokuxhumana noma imiyalezo yengxoxo, ngisho nangama-USB drive athelelekile. Ngokuvamile, amawebhusayithi noma ama-imeyili anobungozi abonakala ngemininingwane efana namaphutha esipelingi, ama-logo akopishwe kabi, noma amagama ezinkampani ashintshiwe kancane (isibonelo, “PayePal” esikhundleni se-“PayPal”).

Uma isingaphakathi, i-ransomware kungasakazeka ngenethiwekhi kwamanye amakhompyutha noma ama-shared drive, ngakho-ke akuthinti nje kuphela i-PC yakho yasekhaya: ingathinta namakhompyutha enkampani, amaseva, noma ngisho nengqalasizinda yomphakathi, kusetshenziswa ithuba Amaphutha okuphepha kweWindows.

Inkinga ibhebhetheka ngoba Izinhlobo eziningi ze-ransomware zintshontsha ulwazi oluyimfihlo Ngaphambi kokuyibethela, bese beyisongela ngokuyivuza uma ungakhokhi. Lokhu kwenza lolu hlobo lokuhlasela lube olunye lwezinsongo ezinkulu zokuphepha kwe-inthanethi namuhla, kokubili kubantu ngabanye kanye nezinhlangano.

Kuyini ukuvikelwa kwe-Windows ransomware?

I-Windows 10 ne-Windows 11 ifaka njengokujwayelekile I-Microsoft Defender Antivirus kanye ne-firewall ehlanganisiweezihlaziya amafayela, izinqubo, kanye nethrafikhi yenethiwekhi ngemuva. Ngaleso sisekelo, iMicrosoft yengeze ungqimba olwengeziwe olubizwa ngokuthi ukuvikela kusuka ku -hlengo, okuyinhloko yayo umsebenzi othi "Ukufinyelela okuLawulwayo kumafolda".

Umgomo walesi sici ukuvikela amafolda athile esistimu kanye nephrofayela yomsebenzisi ukuze izinhlelo zokusebenza ezithembekile kuphela ezingazishintsha. Ngale ndlela, uma i-ransomware noma enye i-malware izama ukubethela noma ukususa amafayela, i-Windows ivimba ushintsho bese ibonisa isaziso.

Empeleni, lokhu kuvikelwa kuvimbela izinhlelo zokusebenza ezingaziwa noma ezisolisayo Bazokwenza izinguquko ezingagunyaziwe kumafayela atholakala kulawo mafolda. Ngale ndlela, noma ngabe usongo luyakwazi ukwenzeka, kuzoba nzima kakhulu ukuthi lukushiye ungenazo izincwadi ezibalulekile, izithombe, noma amaphrojekthi.

Ngaphezu kwalokho, lesi sici sihlangana kahle kakhulu ne I-Microsoft Defender ye-Endpoint kanye namathuluzi okuphatha amabhizinisi (i-Intune, i-Configuration Manager, njll.), avumela ukuthunyelwa kanye nokuhlolwa kokucushwa okukhulu, kanye nokubuyekezwa okuhlanganisiwe kwemicimbi yokuvimba.

Indlela Ukufinyelela Ifolda Elawulwayo Okusebenza Ngayo

"Ukufinyelela kufolda elawulwayo" kusekelwe emcabangweni olula: Izinhlelo zokusebenza ezithembekile kuphela ezingashintsha amafayela ezindaweni ezithile ezivikelwe.Konke okunye kuvinjelwe noma kungene ngemvume kumodi yokuhlola, kuye ngokucushwa kwakho.

Amafasitela agcina uhlu lwezinhlelo zokusebenza ezithembekile ngokusekelwe ekusabalaleni kwayo kanye nedumela layo. Uma uhlelo lusetshenziswa kabanzi, selusebenze isikhathi eside ngaphandle kokuziphatha okubi, futhi iMicrosoft ingazange ithole noma yiziphi izinkinga ngalo, lubhekwa njengoluthembekile futhi luvunyelwe ukusebenza ngokujwayelekile kumafolda avikelwe.

Uma uhlelo lokusebenza lungekho kulolo hlu, Imizamo yakho yokubhala, ukususa, noma ukuguqula amafayela kumafolda avikelwe ivinjiwe. (noma ziyahlolwa, uma usebenzisa imodi ye-log kuphela). Ungangeza futhi ngesandla okuhlukile kwezinhlelo zokusebenza ezithile owaziyo ukuthi ziphephile.

Lesi sici siwusizo kakhulu ngokumelene ne-ransomware ngoba Ukuhlaselwa kuvame ukugxila ekubetheleni amadokhumenti, izithombe, amavidiyo, noma amaphrojekthiNgenxa yokuthi la mafolda anokufinyelela okuqinile, i-malware ihlangabezana nesithiyo esivimbela noma esiphazamisa kakhulu injongo yayo.

Ezindaweni zezinkampani, i-Controlled Folder Access ingalungiselelwa kusukela ku- I-Microsoft IntuneUmphathi Wokucushwa noma i-Microsoft Defender ye-Endpoint. Kulezi zimo, abaphathi bangabuyekeza imicimbi ekhiqizwe ngaphakathi bese belungisa inqubomgomo ngokuya ngezidingo zangempela zenhlangano.

Amafolda avikelwe ngokuzenzakalelayo ku-Windows

Uma uvula i-Controlled Folder Access, I-Windows ivikela ngokuzenzakalelayo inani lephrofayela yomsebenzisi kanye namafolda esistimuokuyilapho uvame ukugcina khona amadokhumenti nokuqukethwe komuntu siqu.

Imizila evikelwe ngokuzenzakalelayo ifaka phakathi, isibonelo:

• c:\Abasebenzisi\ Amadokhumenti
• c:\Abasebenzisi\Omphakathi\Amadokhumenti
• c:\Abasebenzisi\ Izithombe
• c:\Abasebenzisi\Omphakathi\Izithombe
• c:\Abasebenzisi\ Amavidiyo
• c:\Abasebenzisi\Amavidiyo Omphakathi
• c:\Abasebenzisi\ Umculo
• c:\Abasebenzisi\Umphakathi\Umculo
• c:\Abasebenzisi\ Izintandokazi

Lezi yizindawo ovame ukuzibona ngaphansi kwazo “Le PC” ku-File Explorerfuthi ngokuvamile bayizisulu zokuqala zabahlaseli, ngakho-ke kunengqondo ukuthi iWindows ibavikele ngokuzenzakalelayo.

Futhi, amaphrofayili athile esistimu njengoba LocalService, NetworkService o systemprofile Futhi banamafolda abo avikelwe (isibonelo, C:\Windows\System32\config\systemprofile\Documents(uma ikhona). Lokhu kusiza ukuvikela izinqubo zangaphakathi kanye nezinsizakalo zesistimu yokusebenza uqobo.

Amafolda esistimu avikelwe Azikwazi ukususwa ohlwiniLokhu kwenzelwa ukuqinisekisa ukuthi lolu ngqimba oluyisisekelo lokuphepha alukhutshazwa ngengozi. Ongakwenza ukwengeza izindlela zakho ukuze wandise ukuvikelwa kwamanye ama-directory noma ama-drive.

Indlela yokuvula ukuvikelwa kwe-ransomware ku-Windows 11

Ku-Windows 11, izilungiselelo zilula kakhulu ukuzifinyelela, kodwa Akubonakali ngaso sonke isikhathi ekuqaleniNgokulandela lezi zinyathelo, uzobe ususebenza ngokushesha.

1. Vula Ukuphepha Kwe-Windows
Indlela esheshayo ukucindezela ukhiye we-Windows, thayipha "Windows Security" bese uvula uhlelo lokusebenza. Ungaya futhi ku- Ikhaya > Izilungiselelo > Ubumfihlo nokuphepha > Ukuphepha kwe-Windows bese ungena usuka lapho.

2. Iya ku-“Antivirus kanye nokuvikelwa kwezinsongo”
Ngaphakathi kohlelo lokusebenza, uzobona izigaba eziningana. Leyo oyithandayo... "Ukuvikela i-antivirus kanye nokuvikela izinsongo"Chofoza bese iwindi elisha lizovuleka elinesimo se-Microsoft Defender kanye nezinketho ezahlukene.

3. Thola “Ukuvikelwa Kwe-Ransomware”
Skrola uye phansi kwaleso sikrini uze uthole ibhlokhi "Ukuvikelwa ku-ransomware"Ngezansi uzobona isixhumanisi esithi into efana nale "Ukuphatha ukuvikelwa kwe-ransomware". Chofoza lapho.

4. Sebenzisa "Ukufinyelela okulawulwayo kumafolda"
Esikrinini esisha uzobona inkinobho ye “Lawula ukufinyelela kufolda” (noma “Ukufinyelela Ifolda Elawulwayo” kuye ngenguqulo/ulimi). Ngokuvamile ikhutshazwa ngokuzenzakalelayo. Yinike amandla: kuzovela iwindi Lokulawula I-akhawunti Yomsebenzisi elicela ukuqinisekiswa; yamukela ukuthi izinguquko zisebenze.

Kusuka lapho, amafayela akho, amafolda, kanye nezindawo ezithile zememori Zizovikelwa ekuguqulweni okungagunyaziwe yizinhlelo zokusebenza ezingaziwa noma ezinonya.

Lungiselela amafolda avikelwe kanye nezinhlelo zokusebenza ezivunyelwe

Uma i-Controlled Folder Access isivuliwe, kuyalulekwa ukuthi Bheka uhlu lwamafolda nezinhlelo zokusebenza ezivunyelwe. ukuze uyivumelanise nendlela yakho yokusebenza yangempela.

Esigabeni esifanayo sokuvikelwa kwe-ransomware uzothola:

• Umlando wokuvimba: ukubona ukuthi yiziphi izinhlelo zokusebenza ezizame ukuguqula amafayela futhi ezivinjiwe.
• Amafolda avikelweLapha ungabuyekeza amafolda asevele evikelwe bese wengeza amasha.
• Vumela uhlelo lokusebenza ukuthi lufinyelele kwenye yamafolda alawulwayo: ukunikeza imvume ohlelweni oluthile oluvinjiwe kodwa olubheka njengoluphephile.

Uma uvame ukulondoloza amaphrojekthi kufolda yangokwezifiso (isibonelo, D:\Amaphrojekthi noma iyunithi yangaphandle) kunconywa kakhulu Yengeze njengefolda evikelweQaphela ukuthi noma yimaphi amafolda angaphansi angaphakathi kwawo nawo azombozwa.

Ngokuphathelene nezinhlelo zokusebenza, uma uthola ukuthi uhlelo olusemthethweni (isibonelo, umhleli wakho wevidiyo noma i-office suite ehlukile) alukwazi ukulondoloza izinguquko kumafolda avikelwe, Ungayifaka ngesandla ohlwini oluvunyelwe kusuka kunketho efanele. Kodwa-ke, qiniseka ukuthi iyisofthiwe ethembekile, ehlala ilandwa emithonjeni esemthethweni.

Indlela yokuvula ukuvikelwa kwe-ransomware ku-Windows 10

Ku-Windows 10 umqondo uyafana, yize indlela ngaphakathi kwezilungiselelo ihluka kancane. Noma kunjalo, inqubo ilula nje futhi kuthatha imizuzu embalwa kuphela.

1. Finyelela Ukuphepha Kwe-Windows
Qhafaza Ikhaya> Amasethingi, angene "Ukuvuselelwa nokuphepha" futhi, kuphaneli yesobunxele, khetha "Windows Security"Ungathayipha futhi “Ukuphepha kweWindows” ngqo kumenyu yokuqala.

2. Iya ku-“Ukuvikelwa kwegciwane kanye nosongo”
Uma usuvele use-Windows Security, chofoza ku- “Ukuvikela kumagciwane nezinsongo” ukuvula ifasitela ngezinketho ze-antivirus ezakhelwe ngaphakathi.

3. Phatha ukuvikelwa kwe-ransomware
Ngaphakathi kwaleso sigaba, funa isixhumanisi "Ukuphatha ukuvikelwa kwe-ransomware"Ngokuvamile kuvela phansi kwesikrini. Chofoza ukuze ufinyelele izinketho ezithile.

4. Nika amandla ukufinyelela kufolda elawulwayo
Njengaku-Windows 11, uzobona inketho yokuthi vumela ukulawula ukufinyelela kwefoldaHambisa iswishi ku-"Vuliwe" bese uqinisekisa efasiteleni elivelayo lokuphepha. Kusukela ngaleso sikhathi kuqhubeke, isici sizoqala ukuvikela amafolda akho abalulekile.

Ukusuka lapho, Ungangeza amafolda avikelwe engeziwe, ubuyekeze umlando wokukhiya futhi uvumele izinhlelo zokusebenza ezithile njengaku-Windows 11, kusukela kuzinketho ezivela esikrinini esifanayo.

Sebenzisa i-OneDrive nama-backup njengesivikelo esengeziwe

Ukuvikelwa kwe-Windows ransomware kuwusizo olukhulu, kodwa Ayithathi indawo yama-backupsOkungcono kakhulu, lo msebenzi kufanele uhlanganiswe nohlelo oluhle lokusekelayo, kokubili efwini kanye nokungaxhunyiwe ku-inthanethi.

Uma ungena ngemvume nge-akhawunti yakho ye-Microsoft futhi ulungiselela I-OneDriveIbhokisi lamafasitela Vumelanisa ngokuzenzakalelayo amadokhumenti akho, izithombe, ideskithophu, njll. amafolda. futhi unikeze ukutholwa kanye nokutakula kwe-ransomware okuhlanganisiwe, okuhlanganisa umlando wefayela ku-Windows ukubuyisela amakhophi wangaphambilini amafayela.

Ngaphezu kwefu, kunconywa kakhulu Dala amakhophi avamile kuma-media angaxhunyiwe ku-inthanethi (njenge-hard drive yangaphandle enqanyuliwe uma ingasetshenziswa). Ngale ndlela, noma ngabe ukuhlaselwa kuphula ukuzivikela kwakho, uzohlala unenketho yokubuyisela idatha yakho endaweni lapho i-ransomware ingenakukwazi ukuyifinyelela.

Okufanele ukwenze uma usola ukuthi ikhompyutha yakho inegciwane

Uma ubona ukuziphatha okungajwayelekile (ikhompyutha yakho ivele ihambe kancane kakhulu, amafasitela angajwayelekile ayavuleka, amadokhumenti awavuli kahle, njll.) noma uke wezwa ngakho umkhankaso omusha we-malwareInkambo ehlakaniphile kakhulu yokwenza iwukuqala ukuhlaziya okugcwele.

Kusuka ku-Windows Security, iya ku- “Ukuvikela kumagciwane nezinsongo” futhi enze a ukuhlaziywa okusheshayo nge-Microsoft Defender. Ungakhetha futhi ukuskena okungaxhunyiwe ku-inthanethi, okuqalisa kabusha uhlelo lwakho futhi kuskenwe ngaphambi kokuba izinsongo ezingaba khona zilayishwe.

Uma i-ransomware isivele idale umonakalo wayo, kuyinto evamile ukuthi isikrini noma ifasitela livela njengenothi lesihlengoukucela imali yokuvula idivayisi noma amafayela. Ngaleso sikhathi:

• Ungakhokhi isihlengoAkukho siqinisekiso sokuthi uzoyithola idatha, futhi uzobe uxhasa izigebengu ngezimali.
• Zama ukuhlanza ikhompyutha yakho nge-Windows Security. noma ngesisombululo esithembekile sokulwa ne-malware.
• Sebenzisa ama-backup akho (i-OneDrive, amadrayivu angaphandle, njll.) ukuze kubuyiselwe amafayela athintekile uma uhlelo selungenayo i-malware.

Uma usuvele ukhokhe ngephutha, into enengqondo kakhulu okufanele uyenze Xhumana nebhange lakho kanye neziphathimandla ngokushesha. abavela ezweni lakini (amaphoyisa, izinhlangano zokuphepha kwe-inthanethi, njll.) ukuze bazame ukuvimba lo msebenzi futhi babike ukukhwabanisa.

Buyekeza imicimbi yokufinyelela ifolda elawulwayo

Uma i-Controlled Folder Access ivimba noma ihlola isenzo, Imicimbi ethile ye-Windows iloga okungabukwa kokubili endaweni kanye naku-portal ye-Microsoft Defender ezindaweni zebhizinisi.

Ezinhlanganweni ezisebenzisa iMicrosoft Defender ye-Endpoint, kungenzeka qala imibuzo ethuthukisiwe ukubuka ukwephulwa okuvinjiwe noma okuhloliwe, isibonelo ngokusebenzisa izihlungi ezinhlotsheni zezenzo Ukwephulwa Kokufinyelela Kwefolda ElawulwayoKuvinjiwe o Ukwephulwa Kokufinyelela Kwefolda ElawulwayoKuhloliwe.

Ezingeni lendawo, ungasebenzisa I-Windows Event Viewer ukungenisa ukubukwa okwenziwe ngokwezifiso (isibonelo, ifayela i-cfa-events.xmlfuthi ubone imicimbi efana nale:

I-ID yomcimbi	Descripción
5007	Ushintsho lokuhlela I-Microsoft Defender
1124	Ukufinyelela kwefolda elawulwayo okuhloliwe
1123	Ukufinyelela kufolda elawulwayo kuvinjiwe
1127	Bhala umzamo wokuthola ingxenye evikelwe evinjiwe
1128	Ukuzama ukubhala emkhakheni ovikelwe ohloliwe

Leli zinga lemininingwane liyasiza, ikakhulukazi ezinkampanini, ukuthi lungisa izinqubomgomo futhi uthole izinhlelo zokusebenza ezisemthethweni ezidinga imvume ngaphandle kokubeka engcupheni ukuphepha okuphelele kohlelo.

Okungafakiwe kanye namakhadi e-wildcard ku-Microsoft Defender

Ngaphezu kokuvikela okuqondile ngokumelene ne-ransomware, i-Microsoft Defender ivumela chaza okukhishwe ngaphandle ukuze amafayela athile, amafolda, izinhlobo zamafayela, noma izinqubo zingahlaziywa ngesikhathi sangempela.

Kusuka ku-Windows Security, esigabeni sokuvikela i-antivirus, ungangena "Engeza noma ususe okukhishwe" bese ukhetha phakathi:

• Faka kungobo yomlando: khipha ifayela elithile.
• Isixhaxha: susa umzila wonke kanye nakho konke okuqukethwe kuwo.
• Uhlobo lwefayela: khipha ngokwesandiso, njenge-.docx, .pdf, njll.
• Inqubo: khipha i-executable ukuze amafayela evulayo angahlaziywa ngesikhathi sangempela.

Zingasetshenziswa futhi ama-wildcard (*) kanye neziguquguquko zemvelo kwezinye izinto ezingafakwanga, isibonelo ukukhipha wonke amafayela anesandiso esiphela ngo-“st” (nge *st) noma zonke izinqubo ezitholakala kufolda ethile (isibonelo, C:\MyProcess\*).

Nakuba kuyisici esiwusizo sokugwema ukungqubuzana kokusebenza nezinhlelo ezithile, Kumelwe isetshenziswe ngokucophelela okukhulu.ngoba noma yisiphi isici esikhishwe asisavikelwe ukuhlaziywa kwesikhathi sangempela futhi singaba yindawo yokungena kwe-malware.

Amathiphu engeziwe okugwema i-ransomware

Ukuvikelwa kwe-Windows ransomware kuyingxenye ebaluleke kakhulu, kodwa Akuyona yodwa oyidingayo.Ukuze kuncishiswe ingozi, kuyalulekwa ukulandela uchungechunge lwemikhuba emihle eyisisekelo.

Gcina i-Windows nezinhlelo zakho zokusebenza zisesikhathini
Izigebengu ze-inthanethi zihlala zisebenzisa ithuba ubuthakathaka ohlelweni lokusebenza kanye nezinhlelo zansuku zonkeUkuze uzivale ngokushesha okukhulu, iya ku- Qala > Izilungiselelo > I-Windows Update futhi uqinisekise ukuthi izibuyekezo ezizenzakalelayo zivuliwe futhi zifakwa njalo.

Sebenzisa uhlelo oluhle lwe-antivirus futhi ungaluvimbeli.
I-Microsoft Defender iyi- I-antivirus eyakhelwe ngaphakathi futhi enekhono elihleKodwa-ke, uma uthanda, ungakhetha izixazululo ezivela eceleni (ezikhokhelwayo noma zamahhala) uma nje zithembekile. Into ebalulekile ukuthi unenjini yokuvikela yesikhathi sangempela esebenzayo futhi esesikhathini.

Izipele zangaphandle nezefu
Njengoba sesishilo kakade, kubalulekile ukuba amakhophi agciniwe ezindaweni ezingaphandle kwekhompyutha yakho eyinhlokoUkuhlanganisa isitoreji samafu (i-OneDrive, i-Google Drayivu, i-Dropbox…) nama-drive angaphandle angaxhunyiwe ku-inthanethi kuyisu eliqinile kakhulu ngokumelene nanoma iyiphi inhlekelele, kungaba yi-ransomware noma ukwehluleka kwehadiwe.

Qaphela ama-imeyili, izixhumanisi, kanye nokulanda
Izifo eziningi ziqala nge- ngokuchofoza ngokunganaki kusixhumanisi noma okunamathiselweQaphela ama-imeyili angalindelekile, abathumeli abangaziwa, imiyalezo exwayisayo ecela ulwazi oluphuthumayo noma izinkokhelo, kanye nesofthiwe elandiwe kumawebhusayithi aqolwe ngabaphangi noma angabazekayo.

Qala kabusha ikhompyutha yakho ngezikhathi ezithile
Kubonakala kuwubuwula, kodwa Qala kabusha okungenani kanye ngesonto Kuyasiza ukuqinisekisa ukuthi izibuyekezo zesistimu nezinhlelo zokusebenza zisetshenziswa kahle, kanye nokuthuthukisa ukusebenza kanye nokuzinza okuphelele.

Ngakho konke lokhu kuhlelwe kahle futhi nomsebenzi we Ukufinyelela kufolda elawulwayo kuvunyelweI-Windows 11 yakho (noma i-Windows 10) izokulungela kangcono ukubhekana ne-ransomware nezinye izinsongo ezifanayo, okunciphisa amathuba okuba amafayela akho abalulekile agcine entshontshiwe noma ebethelwe ngendlela engenakulungiseka.