If you have not done so already, download and run the following simple batch file to Vaccinate your computer from the NotPetya Ransomware Virus Outbreak

Click this Link > NoPetyaVac.zip < to Download the File Now

When you have downloaded the above file, follow these simple steps.

  1. Extract the “nopetyavac.bat” file from the NoPetyaVac.zip file you just downloaded
  2. Right click the extracted “nopetyavac.bat” file just extracted and select “Run as administrator”
  3. Click Yes to the Windows UAC Prompt if asked “Do you want the following program to make changes to this computer?”
  4. A DOS box will  open and should contain the following message

    Administrative permission required. Detecting permissions…
    Computer vaccinated for current version of NotPetya/Petya/Petna/SortaPetya.
    Press any key to continue . . .

    As shown below

Press any key to continue and you’re done. That’s all there is to it.

Your computer is now vaccinated against the NotPetya / Petya related Ransomware Strains.

You may now delete the downloaded “NoPetyaVac.zip” and extracted “nopetyavac.bat” files from your computer.

Additional Information

Credits

Batch file created by “Lawrence Abrams” of BleepingComputer.com

What the Batch File Contains

@echo off
REM Administrative check from here: https://stackoverflow.com/questions/4051883/batch-script-how-to-check-for-admin-rights
REM Vaccination discovered by twitter.com/0xAmit/status/879778335286452224
REM Batch file created by Lawrence Abrams of BleepingComputer.com. @bleepincomputer @lawrenceabrams

echo Administrative permissions required. Detecting permissions...
echo.
		
net session >nul 2>&1

if %errorLevel% == 0 (
	if exist C:\Windows\perfc (
		echo Computer already vaccinated for NotPetya/Petya/Petna/SortaPetya.
		echo.
	) else (
		echo This is a NotPetya/Petya/Petna/SortaPetya Vaccination file. Do not remove as it protects you from being encrypted by Petya. > C:\Windows\perfc
                echo This is a NotPetya/Petya/Petna/SortaPetya Vaccination file. Do not remove as it protects you from being encrypted by Petya. > C:\Windows\perfc.dll
                echo This is a NotPetya/Petya/Petna/SortaPetya Vaccination file. Do not remove as it protects you from being encrypted by Petya. > C:\Windows\perfc.dat

		attrib +R C:\Windows\perfc
                attrib +R C:\Windows\perfc.dll
                attrib +R C:\Windows\perfc.dat

		echo Computer vaccinated for current version of NotPetya/Petya/Petna/SortaPetya.
		echo.
	)
) else (
	echo Failure: You must run this batch file as Administrator.
)
  
pause

Till the next time..

Comments are closed.