- Ukuvikelwa kwe-Windows ransomware kusekelwe ku-Controlled Folder Access, okuvumela kuphela izinhlelo zokusebenza ezithembekile ukuthi zishintshe amafayela ezindaweni ezibucayi.
- I-Windows 11 ne-Windows 10 zihlanganisa amafolda avikelwe njengejwayelekile futhi zikuvumela ukuthi wengeze izindlela ezengeziwe ezithembekile kanye nezinhlelo zokusebenza ukuze ulungiselele ukuphepha kumsebenzisi ngamunye.
- Ukwengeza lo msebenzi ngama-backup, izibuyekezo ezivamile, kanye nemikhuba emihle lapho uphequlula futhi uvula amafayela kubalulekile ekunciphiseni ingozi yokuntshontshwa kwedatha.
I-Ransomware isibe ngesinye sezinkinga ezinkulu kakhulu kunoma yimuphi umsebenzisi we-Windows: ibethela amafayela akho, ikhiye ikhompyutha yakho, futhi, ngaphezu kwakho konke, ifuna inkokhelo ukuze iphinde ifinyeleleke—inkokhelo engaqinisekisi lutho. I-Windows 11 (kanye ne-Windows 10) inesici esithile sokulwa nale nkinga, kodwa ikhutshaziwe ngokuzenzakalelayo, futhi udinga ukwazi ukuthi uchofoze kuphi ukuze isebenzele wena.
Kulesi sihloko uzobona ukuthi kuyini ngempela ukuvikelwa kwe-Windows ransomware, ukuthi "Ukufinyelela Kwefolda Elawulwayo" kusebenza kanjani , ukuthi ungayisebenzisa kanjani isinyathelo ngesinyathelo ku-Windows 11 kanye ne-Windows 10, ukuthi yimaphi amafolda avikelwe ngokuzenzakalelayo, ukuthi ungawangeza kanjani awakho, ukuthi ungazivumela kanjani izinhlelo zokusebenza ezithile, nokuthi yiziphi ezinye izinyathelo okufanele uzithathe (ukwenza amakhophi agciniwe, izibuyekezo, ukuqonda okuvamile, njll.) ukuze ukwephulwa kwedatha kungonakalisi usuku lwakho.
Iyini i-ransomware futhi kungani iyingozi kangaka?
I-Ransomware uhlobo lwe -malware eyenzelwe ukukukhiya ngaphandle kwekhompyutha yakho noma amafayela uze ukhokhe isihlengo. Ngokuvamile ibethela amadokhumenti, izithombe, amavidiyo, futhi ngezinye izikhathi ngisho nesistimu yokusebenza uqobo, ikuvimbele ekuvuleni noma yini evamile.
Lolu hlobo losongo lungafika ngamawebhusayithi angamanga noma angathembekile, ukulanda okuphangiwe, okunamathiselwe kwe-imeyili okusolisayo , izixhumanisi ezinkundleni zokuxhumana noma imiyalezo yengxoxo, ngisho nangama-drive e-USB anegciwane. Ngokuvamile, amawebhusayithi noma ama-imeyili anobungozi atholakala ngemininingwane efana namaphutha esipelingi, ama-logo angakopishwanga kahle, noma amagama ezinkampani ashintshiwe kancane (isibonelo, “i-PayePal” esikhundleni se-“PayPal” ).
Uma isingaphakathi, i-ransomware ingasakazeka kunethiwekhi iye kwamanye amakhompyutha noma kuma-shared drive, ngakho ayithinti nje kuphela i-PC yakho yasekhaya: ingathinta namakhompyutha enkampani, amaseva, noma ngisho nengqalasizinda yomphakathi, isebenzisa amaphutha okuphepha ku-Windows.
Inkinga iba nkulu ngoba izinhlobo eziningi ze-ransomware zintshontsha ulwazi oluyimfihlo ngaphambi kokulubhala ngemfihlo, bese zikusongela ngokukusongela ngokuluvuza uma ungakhokhi. Lokhu kwenza lolu hlobo lokuhlasela lube olunye lwezinsongo ezinkulu zokuphepha kwe-inthanethi namuhla, kokubili kubantu ngabanye kanye nezinhlangano.
Kuyini ukuvikelwa kwe-Windows ransomware?
I-Windows 10 ne-Windows 11 zifaka i-Microsoft Defender Antivirus kanye ne-firewall eyakhelwe ngaphakathi , eskena amafayela, izinqubo, kanye nethrafikhi yenethiwekhi ngemuva. Yakhela phezu kwalesi sisekelo, i-Microsoft yengeze ungqimba olwengeziwe olubizwa ngokuthi i-ransomware protection , okuyinhloko yalo isici esithi "Controlled Folder Access".
Inhloso yalesi sici ukuvikela amafolda athile esistimu kanye nephrofayela yomsebenzisi ukuze izinhlelo zokusebenza ezithembekile kuphela ezingawaguqula. Ngale ndlela, uma i-ransomware noma enye i-malware izama ukubethela noma ukususa amafayela, i-Windows ivimba ushintsho futhi ibonise isaziso.
Empeleni, lokhu kuvikela kuvimbela izinhlelo zokusebenza ezingaziwa noma ezisolisayo ekwenzeni izinguquko ezingagunyaziwe kumafayela atholakala kula mafolda. Ngakho-ke, noma ngabe usongo luyakwazi ukufeza, kuzoba nzima kakhulu ngawe ukulahlekelwa amadokhumenti abalulekile, izithombe, noma amaphrojekthi.
Ngaphezu kwalokho, lesi sici sihlangana kahle kakhulu ne -Microsoft Defender for Endpoint kanye namathuluzi okuphatha amabhizinisi (i-Intune, i-Configuration Manager, njll.), okuvumela ukuthunyelwa nokuhlolisiswa kokucushwa okukhulu, kanye nokubuyekezwa okuhlanganisiwe kwemicimbi yokuvimba.
Indlela Ukufinyelela Ifolda Elawulwayo Okusebenza Ngayo
"Ukufinyelela Ifolda Elawulwayo" kusekelwe emcabangweni olula: izinhlelo zokusebenza ezithembekile kuphela ezingashintsha amafayela ezindaweni ezithile ezivikelwe . Konke okunye kuvinjelwe noma kungene ngemvume kumodi yokuhlola, kuye ngokucushwa kwakho.
I-Windows igcina uhlu lwezinhlelo zokusebenza ezithembekile ngokusekelwe ekusabalaleni kwazo kanye nedumela lazo. Uma uhlelo lusetshenziswa kabanzi, selusebenze isikhathi eside ngaphandle kokuziphatha okubi, futhi i-Microsoft ingazange ithole noma yiziphi izinkinga ngalo, lubhekwa njengoluthembekile futhi luvunyelwe ukusebenza ngokujwayelekile kumafolda avikelwe.
Uma uhlelo lokusebenza lungekho kulolo hlu, imizamo yalo yokubhala, ukususa, noma ukuguqula amafayela kumafolda avikelwe iyavinjelwa (noma ihlolwe, uma usebenzisa imodi yokungena kuphela). Ungangeza futhi ngesandla okuhlukile kwezinhlelo zokusebenza ezithile owaziyo ukuthi ziphephile.
Lesi sici siwusizo ikakhulukazi ngokumelene ne-ransomware ngoba ukuhlaselwa kuvame ukugxila ekubetheleni amadokhumenti, izithombe, amavidiyo, noma amaphrojekthi . Njengoba la mafolda enokufinyelela okulinganiselwe kakhulu, i-malware ihlangabezana nesithiyo esivimbela noma esivimbela kakhulu umgomo wayo.
Ezindaweni zezinkampani, i-Controlled Folder Access ingalungiselelwa kusuka ku -Microsoft Intune , i-Configuration Manager, noma i-Microsoft Defender ye-Endpoint. Kulezi zimo, abaphathi bangabuyekeza imicimbi ekhiqizwe ngaphakathi futhi balungise inqubomgomo ngokuya ngezidingo zangempela zenhlangano.
Amafolda avikelwe ngokuzenzakalelayo ku-Windows
Uma uvula i-Controlled Folder Access, i-Windows ivikela ngokuzenzakalelayo inani lephrofayela yomsebenzisi kanye namafolda esistimu , okuyilapho uvame ukugcina khona amadokhumenti nokuqukethwe komuntu siqu.
Imizila evikelwe ngokuzenzakalelayo ifaka phakathi, isibonelo:
- c:\Abasebenzisi\ Amadokhumenti
- c:\Abasebenzisi\Omphakathi\Amadokhumenti
- c:\Abasebenzisi\ Izithombe
- c:\Abasebenzisi\Omphakathi\Izithombe
- c:\Abasebenzisi\ Amavidiyo
- c:\Abasebenzisi\Amavidiyo Omphakathi
- c:\Abasebenzisi\ Umculo
- c:\Abasebenzisi\Umphakathi\Umculo
- c:\Abasebenzisi\ Izintandokazi
Lezi zindawo yizo ovame ukuzibona ngaphansi kokuthi "Le PC" ku-File Explorer , futhi ngokuvamile ziyizisulu zokuqala zabahlaseli, ngakho-ke kunengqondo ukuthi i-Windows izivikela ngokuzenzakalelayo.
Futhi, amaphrofayili athile esistimu njengoba LocalService, NetworkService o systemprofile Futhi banamafolda abo avikelwe (isibonelo, C:\Windows\System32\config\systemprofile\Documents(uma ikhona). Lokhu kusiza ukuvikela izinqubo zangaphakathi kanye nezinsizakalo zesistimu yokusebenza uqobo.
Amafolda esistimu avikelwe awakwazi ukususwa ohlwini , ukuqinisekisa ukuthi lolu ngqimba oluyisisekelo lokuphepha alukhutshazwa ngengozi. Kodwa-ke, ungangeza izindlela zakho ukuze wandise ukuvikelwa kwamanye ama-directory noma ama-drive.
Indlela yokuvula ukuvikelwa kwe-ransomware ku-Windows 11
Ku-Windows 11, izilungiselelo zilula kakhulu ukuzifinyelela, kodwa azibonakali ngaso sonke isikhathi . Ukulandela lezi zinyathelo kuzoyenza isebenze ngokushesha.
1. Vula Ukuphepha Kwe-Windows
Indlela esheshayo ukucindezela ukhiye we-Windows, thayipha "Windows Security" bese uvula uhlelo lokusebenza. Ungaya futhi ku- Ikhaya > Izilungiselelo > Ubumfihlo nokuphepha > Ukuphepha kwe-Windows bese ungena usuka lapho.
2. Iya ku-“Antivirus kanye nokuvikelwa kwezinsongo”
Ngaphakathi kohlelo lokusebenza, uzobona izigaba eziningana. Leyo oyithandayo... "Ukuvikela i-antivirus kanye nokuvikela izinsongo"Chofoza bese iwindi elisha lizovuleka elinesimo se-Microsoft Defender kanye nezinketho ezahlukene.
3. Thola “Ukuvikelwa Kwe-Ransomware”
Skrola uye phansi kwaleso sikrini uze uthole ibhlokhi "Ukuvikelwa ku-ransomware"Ngezansi uzobona isixhumanisi esithi into efana nale "Ukuphatha ukuvikelwa kwe-ransomware". Chofoza lapho.
4. Sebenzisa "Ukufinyelela okulawulwayo kumafolda"
Esikrinini esisha uzobona inkinobho ye “Lawula ukufinyelela kufolda” (noma “Ukufinyelela Ifolda Elawulwayo” kuye ngenguqulo/ulimi). Ngokuvamile ikhutshazwa ngokuzenzakalelayo. Yinike amandla: kuzovela iwindi Lokulawula I-akhawunti Yomsebenzisi elicela ukuqinisekiswa; yamukela ukuthi izinguquko zisebenze.
Kusukela ngaleso sikhathi kuqhubeke, amafayela akho, amafolda, kanye nezindawo ezithile zememori kuzovikelwa ekuguqulweni okungagunyaziwe yizinhlelo zokusebenza ezingaziwa noma ezinonya.
Lungiselela amafolda avikelwe kanye nezinhlelo zokusebenza ezivunyelwe
Uma i-Controlled Folder Access isivuliwe, kungumqondo omuhle ukubheka uhlu lwamafolda futhi uvumele izinhlelo zokusebenza ukuthi zivumelanise nendlela yakho yokusebenza.
Esigabeni esifanayo sokuvikelwa kwe-ransomware uzothola:
- Umlando wokuvimba: ukubona ukuthi yiziphi izinhlelo zokusebenza ezizame ukuguqula amafayela futhi ezivinjiwe.
- Amafolda avikelweLapha ungabuyekeza amafolda asevele evikelwe bese wengeza amasha.
- Vumela uhlelo lokusebenza ukuthi lufinyelele kwenye yamafolda alawulwayo: ukunikeza imvume ohlelweni oluthile oluvinjiwe kodwa olubheka njengoluphephile.
Uma uvame ukulondoloza amaphrojekthi kufolda yangokwezifiso (isibonelo, i-D:\Projects noma idrayivu yangaphandle), kunconywa kakhulu ukuthi uyifake njengefolda evikelwe . Khumbula ukuthi noma yimaphi amafolda angaphansi kwayo nawo azovikelwe.
Ngokuphathelene nezinhlelo zokusebenza, uma uthola ukuthi uhlelo olusemthethweni (isibonelo, umhleli wakho wevidiyo noma i-office suite ehlukile) alukwazi ukulondoloza izinguquko kumafolda avikelwe, ungalufaka ngesandla ohlwini oluvunyelwe usebenzisa inketho ehambisanayo. Kodwa-ke, qiniseka ukuthi luyisofthiwe ethembekile, ehlala ilandwa emithonjeni esemthethweni.
Indlela yokuvula ukuvikelwa kwe-ransomware ku-Windows 10
Ku-Windows 10, umqondo uyafana, yize indlela ngaphakathi kwezilungiselelo ihluka kancane. Noma kunjalo, inqubo ilula futhi ithatha imizuzu embalwa kuphela.
1. Finyelela Ukuphepha Kwe-Windows
Qhafaza Ikhaya> Amasethingi, angene "Ukuvuselelwa nokuphepha" futhi, kuphaneli yesobunxele, khetha "Windows Security"Ungathayipha futhi “Ukuphepha kweWindows” ngqo kumenyu yokuqala.
2. Iya ku-“Ukuvikelwa kwegciwane kanye nosongo”
Uma usuvele use-Windows Security, chofoza ku- “Ukuvikela kumagciwane nezinsongo” ukuvula ifasitela ngezinketho ze-antivirus ezakhelwe ngaphakathi.
3. Phatha ukuvikelwa kwe-ransomware
Ngaphakathi kwaleso sigaba, funa isixhumanisi "Ukuphatha ukuvikelwa kwe-ransomware"Ngokuvamile kuvela phansi kwesikrini. Chofoza ukuze ufinyelele izinketho ezithile.
4. Nika amandla ukufinyelela kufolda elawulwayo
Njengaku-Windows 11, uzobona inketho yokuthi vumela ukulawula ukufinyelela kwefoldaHambisa iswishi ku-"Vuliwe" bese uqinisekisa efasiteleni elivelayo lokuphepha. Kusukela ngaleso sikhathi kuqhubeke, isici sizoqala ukuvikela amafolda akho abalulekile.
Ukusuka lapho, ungangeza amafolda avikelwe engeziwe, ubuyekeze umlando wokukhiya , futhi uvumele izinhlelo zokusebenza ezithile njengaku-Windows 11, kusukela kuzinketho ezivela esikrinini esifanayo.
Sebenzisa i-OneDrive nama-backup njengesivikelo esengeziwe
Ukuvikelwa kwe-Windows ransomware kuwusizo olukhulu, kodwa akusikho okungathatha indawo yama-backup . Okungcono kakhulu, kufanele uhlanganise lesi sici nohlelo oluhle lokusekela, olusekelwe efwini kanye nolungaxhunyiwe ku-inthanethi.
Uma ungena ngemvume nge-akhawunti yakho ye-Microsoft bese usetha i-OneDrive , i-Windows ingavumelanisa ngokuzenzakalelayo amadokhumenti akho, izithombe, ideskithophu, namanye amafolda futhi inikeze ukutholwa nokubuyiselwa kwe-ransomware eyakhelwe ngaphakathi, kufaka phakathi umlando wefayela le-Windows ukubuyisela amakhophi wangaphambilini amafayela akho.
Ngaphezu kwefu, kunconywa kakhulu ukudala ama-backups avamile kwisitoreji esingaxhunyiwe ku-inthanethi (njenge-hard drive yangaphandle engaxhunyiwe uma ingasetshenziswa). Ngale ndlela, noma ngabe ukuhlaselwa kuphula izivikelo zakho, uzohlala unenketho yokubuyisela idatha yakho endaweni lapho i-ransomware ingenakukwazi ukuyifinyelela khona.
Okufanele ukwenze uma usola ukuthi ikhompyutha yakho inegciwane
Uma ubona ukuziphatha okungajwayelekile (ikhompyutha yakho ivele ihambe kancane kakhulu, amafasitela angajwayelekile ayavuleka, amadokhumenti awavuli kahle, njll.) noma uke wezwa ngomkhankaso omusha we-malware , isinyathelo esihlakaniphile kakhulu ukwenza ukuskena okugcwele.
Kusukela ku-Windows Security, iya ku- "Virus & threat protection" bese usebenzisa i -scan esheshayo noma ephelele nge-Microsoft Defender. Ungakhetha futhi i-scan engaxhunyiwe ku-inthanethi, eqala kabusha uhlelo lwakho futhi i-scan ngaphambi kokuba izinsongo ezingaba khona zilayishwe.
Uma i-ransomware isivele ibambekile, kuzovela inothi le-ransomware , lifuna imali yokuvula ikhompyutha noma amafayela akho. Ngaleso sikhathi:
- Ungakhokhi isihlengoAkukho siqinisekiso sokuthi uzoyithola idatha, futhi uzobe uxhasa izigebengu ngezimali.
- Zama ukuhlanza ikhompyutha yakho nge-Windows Security. noma ngesisombululo esithembekile sokulwa ne-malware.
- Sebenzisa ama-backup akho (i-OneDrive, amadrayivu angaphandle, njll.) ukuze kubuyiselwe amafayela athintekile uma uhlelo selungenayo i-malware.
Uma usuvele ukhokhe ngephutha, isinyathelo esihlakaniphile kakhulu ukuxhumana ngokushesha nebhange lakho kanye neziphathimandla ezweni lakini (amaphoyisa, izinhlangano zokuphepha kwe-inthanethi, njll.) ukuze uzame ukuvimba ukuthengiselana nokubika ukukhwabanisa.
Buyekeza imicimbi yokufinyelela ifolda elawulwayo
Uma i-Controlled Folder Access ivimba noma ihlola isenzo, i-Windows ibhala phansi imicimbi ethile engabukwa kokubili endaweni kanye nasephothalini le-Microsoft Defender ezindaweni zebhizinisi.
Ezinhlanganweni ezisebenzisa i-Microsoft Defender ye-Endpoint, kungenzeka ukusebenzisa imibuzo ethuthukisiwe ukuze ubuke ukwephulwa okuvinjiwe noma okuhloliwe, isibonelo ngokusebenzisa izihlungi ezinhlotsheni zesenzo ze -ControlledFolderAccessViolationBlocked noma ze -ControlledFolderAccessViolationAudited.
Endaweni, ungasebenzisa i -Windows Event Viewer ukungenisa ukubukwa okwenziwe ngokwezifiso (isibonelo, ifayela le -cfa-events.xml ) bese ubuka imicimbi efana nalokhu:
| I-ID yomcimbi | Descripción |
|---|---|
| 5007 | Ushintsho lokuhlela I-Microsoft Defender |
| 1124 | Ukufinyelela kwefolda elawulwayo okuhloliwe |
| 1123 | Ukufinyelela kufolda elawulwayo kuvinjiwe |
| 1127 | Bhala umzamo wokuthola ingxenye evikelwe evinjiwe |
| 1128 | Ukuzama ukubhala emkhakheni ovikelwe ohloliwe |
Leli zinga lemininingwane lisiza, ikakhulukazi ezinkampanini, ukuthuthukisa izinqubomgomo nokuthola izinhlelo zokusebenza ezisemthethweni ezidinga imvume ngaphandle kokubeka engcupheni ukuphepha okuphelele kohlelo.
Okungafakiwe kanye namakhadi e-wildcard ku-Microsoft Defender
Ngaphezu kokuvikelwa okuqondile ngokumelene ne-ransomware, i-Microsoft Defender ikuvumela ukuthi uchaze okukhishwe ukuze amafayela athile, amafolda, izinhlobo zamafayela, noma izinqubo zingaskenwa ngesikhathi sangempela.
Kusuka ku-Windows Security, esigabeni sokuvikela i-antivirus, ungaya ku- "Engeza noma ususe okukhishwe" bese ukhetha phakathi kwalokhu:
- Faka kungobo yomlando: khipha ifayela elithile.
- Isixhaxha: susa umzila wonke kanye nakho konke okuqukethwe kuwo.
- Uhlobo lwefayela: khipha ngokwesandiso, njenge-.docx, .pdf, njll.
- Inqubo: khipha i-executable ukuze amafayela evulayo angahlaziywa ngesikhathi sangempela.
Zingasetshenziswa futhi ama-wildcard (*) kanye neziguquguquko zemvelo kwezinye izinto ezingafakwanga, isibonelo ukukhipha wonke amafayela anesandiso esiphela ngo-“st” (nge *st) noma zonke izinqubo ezitholakala kufolda ethile (isibonelo, C:\MyProcess\*).
Nakuba kuyisici esiwusizo sokugwema ukungqubuzana kokusebenza nezinhlelo ezithile, kumele sisetshenziswe ngokuqapha okukhulu , ngoba noma yisiphi isici esikhishwe asisavikelwe ukuhlaziywa kwesikhathi sangempela futhi singaba yindawo yokungena kwe-malware.
Amathiphu engeziwe okugwema i-ransomware
Ukuvikelwa kwe-Windows ransomware kuyingxenye ebaluleke kakhulu, kodwa akuyona yodwa oyidingayo . Ukuze unciphise ubungozi, kuyalulekwa ukulandela uchungechunge lwemikhuba emihle eyisisekelo.
Gcina i-Windows nezinhlelo zakho zokusebenza zisesikhathini
Izigebengu ze-inthanethi zihlala zisebenzisa ithuba ubuthakathaka ohlelweni lokusebenza kanye nezinhlelo zansuku zonkeUkuze uzivale ngokushesha okukhulu, iya ku- Qala > Izilungiselelo > I-Windows Update futhi uqinisekise ukuthi izibuyekezo ezizenzakalelayo zivuliwe futhi zifakwa njalo.
Sebenzisa uhlelo oluhle lwe-antivirus futhi ungaluvimbeli.
I-Microsoft Defender iyi- I-antivirus eyakhelwe ngaphakathi futhi enekhono elihleKodwa-ke, uma uthanda, ungakhetha izixazululo ezivela eceleni (ezikhokhelwayo noma zamahhala) uma nje zithembekile. Into ebalulekile ukuthi unenjini yokuvikela yesikhathi sangempela esebenzayo futhi esesikhathini.
Izipele zangaphandle nezefu
Njengoba sesishilo kakade, kubalulekile ukuba amakhophi agciniwe ezindaweni ezingaphandle kwekhompyutha yakho eyinhlokoUkuhlanganisa isitoreji samafu (i-OneDrive, i-Google Drayivu, i-Dropbox…) nama-drive angaphandle angaxhunyiwe ku-inthanethi kuyisu eliqinile kakhulu ngokumelene nanoma iyiphi inhlekelele, kungaba yi-ransomware noma ukwehluleka kwehadiwe.
Qaphela ama-imeyili, izixhumanisi, kanye nokulanda
Izifo eziningi ziqala nge- ngokuchofoza ngokunganaki kusixhumanisi noma okunamathiselweQaphela ama-imeyili angalindelekile, abathumeli abangaziwa, imiyalezo exwayisayo ecela ulwazi oluphuthumayo noma izinkokhelo, kanye nesofthiwe elandiwe kumawebhusayithi aqolwe ngabaphangi noma angabazekayo.
Qala kabusha ikhompyutha yakho ngezikhathi ezithile
Kubonakala kuwubuwula, kodwa Qala kabusha okungenani kanye ngesonto Kuyasiza ukuqinisekisa ukuthi izibuyekezo zesistimu nezinhlelo zokusebenza zisetshenziswa kahle, kanye nokuthuthukisa ukusebenza kanye nokuzinza okuphelele.
Njengoba konke lokhu kulungiselelwe kahle futhi isici se-Controlled Folder Access sivuliwe , i-Windows 11 (noma i-Windows 10) yakho izokulungela kangcono ukubhekana ne-ransomware nezinye izinsongo ezifanayo, okunciphisa amathuba okuba amafayela akho abalulekile agcine entshontshiwe noma ebethelwe ngendlela engenakulungiseka.
