Network access has been prevented to the system Fazer um comentário

 


Network access has been prevented to the system

There is few worms it modifies the following registry values (if they exist) to restrict access to the machine it has compromised. It is most likely that this is designed to prevent further compromise by other malware. so it disable any remote access by changing the registery values for admin$ and ipc$ shares:

HKLM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters
AutoShareWks
0
HKLM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters
AutoShareServer
0

Workaround:

Scan the system and change the entries to 1 and restart the system.

Deixe uma resposta

O seu endereço de e-mail não será publicado. Campos obrigatórios são marcados com *