<div>
I already have Symantec endpoint protection installed in all workstations.<br />
<br />
So I guess that's enough already ?<br />
<br />
Is there any other area that I can tweak or modify perhaps ?
</div>


<div>
@Arnold:<br />
<br />
Do you mean the below setting:<br />
<br />
<b>Computer Configuration/Policies/Win<wbr />dows Settings/Security Settings/Software restriction Policies/additional rules </b><br />
<br />
New Path Rule:<br />
Path: %AppData%\*.exe<br />
Security Level: Dissalowed
</div>


<div>
The GPO guide is from the same group that distributes combofix.<br />
They have the list of locations and types through which running ..... Those can bring/expose the environment to crypto locker/ransomeware.
</div>


<div>
McKnife,<br />
<br />
I wonder how does the whitelisting looks like on the big enterprise ?
</div>


<div>
You would have applocker create rules to whitelist anything that is already installed, meaning, you declare the status quo to be safe to use. Then, whenever a software change is required (update or new rollout), the applocker admin will have to stage the rollout/update and see how to modify the existing rules so that the new/updated software will run. These new/modified rules will be deployed using GPOs.
</div>


<div>
McKnife,<br />
<br />
Thanks for the assist.<br />
<br />
So in my case here if I remove the Local admin user credentials in my current login, is that going to be safer ?
</div>


<div>
<div class="content wysiwyg-content">
People, <br />
<br />
I have QNAP NAS that I can use as NFS share (\\UNC share) with all my Windows Server and Windows 8/10 workstations.<br />
<br />
So I wonder how to prevent it from Cryptolocker virus ?<br />
<br />
Like this one: <a href="http://www.idigitaltimes.com/jigsaw-ransomware-deletes-files-if-victims-dont-pay-fortunately-theres-decryption-526364" rel="ugc">http://www.idigitaltimes.com/jigsaw-ransomware-deletes-files-if-victims-dont-pay-fortunately-theres-decryption-526364</a>
</div>
</div>


People, 

I have QNAP NAS that I can use as NFS share (\\UNC share) with all my Windows Server and Windows 8/10 workstations.

So I wonder how to prevent it from Cryptolocker virus ?

Like this one: http://www.idigitaltimes.com/jigsaw-ransomware-deletes-files-if-victims-dont-pay-fortunately-theres-decryption-526364

How to safeguard files on QNAP NAS from Cryptolocker virus ?

Anti-virus software was originally developed to detect and remove computer viruses. However, with the proliferation of other kinds of malware, antivirus software started to provide protection from other computer threats. In particular, modern antivirus software can protect from malicious browser helper objects (BHOs), browser hijackers, ransomware, keyloggers, backdoors, rootkits, trojan horses, worms, malicious layered service providers (LSPs), dialers, fraud tools, adware and spyware. Some products also include protection from other computer threats, such as infected and malicious URLs, spam, scam and phishing attacks, online identity theft (privacy), online banking attacks, social engineering techniques, Advanced Persistent Threat (APT), botnets and DDoS attacks.

Anti-Virus Apps

Operating system security (OS security) is the process of ensuring OS integrity, confidentiality and availability. OS security refers to specified steps or measures used to protect the OS from threats, viruses, worms, malware or remote hacker intrusions. OS security encompasses all preventive-control techniques, which safeguard any computer assets capable of being stolen, edited or deleted if OS security is compromised, including authentication, passwords and threats to systems and programs.

OS Security

Servers are computing devices that are similar to desktop computers in that they have the same basic components, but are significantly different in size, configuration and purpose. Servers are usually accessed over a network, and many run unattended, without a computer monitor, input device, audio hardware or USB interfaces. Many servers do not have a graphical user interface (GUI), and are configured and managed remotely. Servers typically include hardware redundancy such as dual power supplies, RAID disk systems, and ECC memory, along with extensive pre-boot memory testing and verification. Critical components might be hot swappable, and to guard against overheating, servers might have more powerful fans or use water cooling.