It took the ransomware virus WannaCry just a few days in May 2017 to become the largest cyberattack of its kind in history.
87f96f3c-c828-4382-bcb1-4d4cd505e39f
It affected tens of thousands computers around the world.
301bcb00-a84e-47e2-99df-7ce7aabd4ba4
Hackers attacked computers in 74 countries, with the largest number of hacking attempts recorded in Russia.
a570d9b6-2538-4156-b832-6500eb92dc68
The virus was stopped thanks to the registration of the domain name iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com.
301bcb00-a84e-47e2-99df-7ce7aabd4ba4
43b36b9d-7af6-47f6-b269-daef0e6f5ba5
a570d9b6-2538-4156-b832-6500eb92dc68
b92a9dd8-708b-4276-8595-dd36d0328a27
Programmer @MalvareTechBlog, together with colleague Darian Hass, discovered that the virus was accessing this address and decided to register the domain to monitor its activity.
301bcb00-a84e-47e2-99df-7ce7aabd4ba4
43b36b9d-7af6-47f6-b269-daef0e6f5ba5
a570d9b6-2538-4156-b832-6500eb92dc68
a95e83b1-7e0e-4985-89aa-047e80c4f3d0
b92a9dd8-708b-4276-8595-dd36d0328a27
2d341e7d-e4a0-41c4-a93e-4afd65e38873
The address was hardcoded into the virus in case it needed to be stopped.
301bcb00-a84e-47e2-99df-7ce7aabd4ba4
43b36b9d-7af6-47f6-b269-daef0e6f5ba5
a570d9b6-2538-4156-b832-6500eb92dc68
2d341e7d-e4a0-41c4-a93e-4afd65e38873
Thus, the spread of the virus was stopped, but only temporarily.
301bcb00-a84e-47e2-99df-7ce7aabd4ba4
If you detect a suspicious process on your device, you should immediately disconnect it from the Internet or home Wi-Fi - this will prevent the spread of the virus.
dc08f2e2-452e-4567-9af1-7284cc4bd42d
If you were unable to secure your computer in advance, you should perform several steps to remove the WannaCrypt virus.
4476b77f-cb0a-4510-a100-d9b83bdddb77
You need to restart the computer in safe mode loading network drivers.
4476b77f-cb0a-4510-a100-d9b83bdddb77
To restore files, one can use decryptors, as well as the Shadow Explorer utility, which will return shadow copies of files and the original state of encrypted files, or Stellar Phoenix Windows Data Recovery.
4476b77f-cb0a-4510-a100-d9b83bdddb77
However, these methods do not guarantee complete file recovery.
4476b77f-cb0a-4510-a100-d9b83bdddb77
If your computers are infected with ransomware, under no circumstances should you pay the attackers.
87f96f3c-c828-4382-bcb1-4d4cd505e39f
dc08f2e2-452e-4567-9af1-7284cc4bd42d
There is no guarantee that once they receive payment, they will decrypt the files rather than demand more.
87f96f3c-c828-4382-bcb1-4d4cd505e39f
dc08f2e2-452e-4567-9af1-7284cc4bd42d
All that remains is to wait for the decryption program: in the case of WannaCry, it took Adrien Guinier, a specialist from the French company Quarkslab, a week to create it.
87f96f3c-c828-4382-bcb1-4d4cd505e39f

Warning: these questons and answers are not all representative of the way questions will be asked and answered in the pilot, because some questions are compound and some answers do not include citations.

Q: When did the ransomware virus WannaCry attack computers all over the world?
A: In May 2017 

Q: How many computers did WannaCry affect?
A: Tens of thousands

Q: In how many countries did hackers attack computers with WannaCry?
A: 74

Q: In what country was  the largest number of WannaCry hacking attempts recorded?
A: In Russia

Q: What person stopped the spread of WannaCry?
A: Programmer @MalvareTechBlog 

Q: What person stopped the spread of WannaCry?
A: Programmer Darian Hass

Q: What did Programmer @MalvareTechBlog and his colleague Darian Hass do to stop the spread of WannaCry?
A: They registered the domain name iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com 

Q: Why did registering the domain name iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com stop WannaCry activity?
A: The address iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com was hardcoded into the virus in case it needed to be stopped

Q: What should a user do if they detect a suspicious process on their device to prevent the spread of the virus?
A: They should immediately disconnect it from the Internet or home Wi-Fi

Q: What can a user do to restore files if their computer is affected with WannaCry?
A: One can use decryptorsA: One can use Stellar Phoenix Windows Data Recovery 

Q: What is the advice to users regarding paying the attackers?
A: Under no circumstances should you pay the attackers

Q: Why should you not pay the attackers if your computer is affected with WannaCry?
A: There is no guarantee they will decrypt the filesA: There is no guarantee they will not demand more

Q: Who created a decryption program for WannaCry?
A: Adrien Guinier, a specialist from the French company QuarkslabA: Adrien Guinier from QuarkslabA: Adrien Guinier 

Q: How long did it take Adrien Guinier, a specialist from the French company Quarkslab, to create a decryption program for WannaCry?
A: A week