Skip to content

Instantly share code, notes, and snippets.

@Neo23x0

Neo23x0/wannacry-vaccine.reg

Last active March 15, 2021 19:49
Show Gist options
  • Star 24 You must be signed in to star a gist
  • Fork 6 You must be signed in to fork a gist
  • Save Neo23x0/3a245e6206951f17125f2b214b160fe8 to your computer and use it in GitHub Desktop.
Save Neo23x0/3a245e6206951f17125f2b214b160fe8 to your computer and use it in GitHub Desktop.
Download ZIP
WannaCrypt Ransomware Immunisation
Raw
wannacry-vaccine.reg
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskdl.exe]
"Debugger"="taskkill /F /IM "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskse.exe]
"Debugger"="taskkill /F /IM "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wannacry.exe]
"Debugger"="taskkill /F /IM "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mssecsvc.exe]
"Debugger"="taskkill /F /IM "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tasksche.exe]
"Debugger"="taskkill /F /IM "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskhsvc.exe]
"Debugger"="taskkill /F /IM "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wcry.exe]
"Debugger"="taskkill /F /IM "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\111.exe]
"Debugger"="taskkill /F /IM "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\lhdfrgui.exe]
"Debugger"="taskkill /F /IM "
@HeXN0P
Copy link

HeXN0P commented May 15, 2017

anyone share me the wanna cry sample i want to reverse it's

@mxmssh
Copy link

mxmssh commented May 15, 2017 •
edited

https://exchange.xforce.ibmcloud.com/collection/WCry2-Ransomware-Outbreak-8b186bc4459380a5606c322ee20c7729

You can find md5 hashes of the samples

@phtom
Copy link

phtom commented May 16, 2017 •
edited

This software is much better! It blocks all the ways WannaCry 2.0 has to enter you PC
https://github.com/phtom/WCRipper
Share.

@karikalansaitechnology
Copy link

i need wannacry ransomware sample because i am working in ransomware project and testing and protecting our firewall for that reason if anyone is having file or link send me my mail id karikalan4692@gmail.com

@karikalansaitechnology
Copy link

can anybody send me link to prevent ransomware open source code due adding firewall
my mail id karikalan4692@gmail.com

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment