How to Disable Ports 445, 139 and 3389 , Protect your system from wannacy attack

How to Disable Ports 445, 139 and 3389 , Protect your system from wannacy attack


 Run the following  command in cmd (run as administrator).

netsh advfirewall firewall add rule dir=in action=block protocol=TCP localport=135 name="Block_TCP-135"

netsh advfirewall firewall add rule dir=in action=block protocol=TCP localport=445 name="Block_TCP-445" 

netsh advfirewall firewall add rule dir=in action=block protocol=TCP localport=3389 name="Block_TCP-3389"

How to Disable SMB Service in Windows and Protect your system from wannacry virus

How to Disable  SMB Service in Windows and Protect your system from wannacry virus


How to Disable SMBv1 support

The wannacry vulnerability can  be closed by completely disabling SMBv1 support. Run the following  command in cmd (run as administrator).

dism /online /norestart /disable-feature /featurename:SMB1Protocol

This will permanently disable SMBv1


For enabling just change the disable-future to enable-future