Back to Setup Guide for Ransomware Protection

Stop Services to Protect Against Ransomware

An additional approach to responding to a ransomware attack is to stop critical services on the server. One such service would be the Server service (also called the Lanman Server service).

The Server service: "Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start."

By stopping this service, ALL file access from the network to the server would be blocked. This can be done by adding the Start, Stop or Restart Service action as shown below:

Stop the Lanman Server service during a ransomware attack

Next: Protection Responses - Run an External Program

“I have created numerous monitors to watch processes, backups, important ftp downloads, services and this product is saving me lots of time and effort and letting me know important information almost immediately instead of searching for problems. It has saved me a ton of time managing the network.”

Paul Potts, Presbyterian Foundation, USA