This video demonstrates how to configure Windows Server File Server Resource Manager to block Crypto malware like Cryptolocker / Cryptowall and other ransomware. FSRM is built into Windows Server and is free… you just need to turn it on!
- Install FSRM
Server Manager > Manage > Add Roles and Features > Add Roles and Features Wizard > Server Roles> File and Storage Services > File and iSCSI Services > File Server Resource Manager - Open File Server Resource Manager
- File Screening Management > File Groups > Create File Group
File group name: Ransomware files
Files to include: *.crypto - File Screening Management > File Screen Templates > Create File Screen Template
Settings tab
Template name: Ransomware Files
Screening type: Passive screening
File groups: Select ‘Ransomware files’
E-mail Message tab: Enter text as desired
Event Log tab: Check “Send warning to event log”
5. File Screening Management > File Screens > Create File Screen
File screen path: Select the path you want this to apply to
Select: “Derive properties from this file screen template (recommended)”
Select: ‘Ransomware Files’
Click HERE for the SCRIPT file that includes many of the 2016 malware file names you likely want to block.
2 Comments
Robert · May 1, 2024 at 11:34 am
File download link dead. 🙁
Ian Matthews · May 22, 2024 at 11:09 pm
Hi Robert;
We just downloaded it. No issues.