If the antivirus databases of your Kaspersky Lab application are up to date, WannaCry malware will be detected and blocked.

To minimize the risk of infection, we recommend that you install the Microsoft patch, which fixes the vulnerability used for the attack. For the detailed guide, see the following section.

Step 1. Make sure your operating system and a Kaspersky Lab application are up-to-date:

1. Press and hold the Windows logo on your keyboard then press the letter R.
2. In the run box type Control Update and click OK.
3. In the new window, click Check for updates and install any critical updates available. You will also see here if updates are set to run automatically.

For operating systems that are no longer supported (e.g. Windows XP) visit this page.

Step 2. Run a database update of your Kaspersky Lab product.

For a guide on how to run an update task, please see this article.   

Step 3. Make sure the System Watcher component is enabled.

For a guide on how to enable System Watcher, please see this article.

Step 4. Make sure the Network Attack Blocker component is enabled.

1. Open the settings of your Kaspersky Lab product.
2. Click Protection. In the right frame, click the switch to enable the Network Attack Blocker component.

1. Check if you have the Microsoft patch installed. For the guide, see above.
2. Disconnect the computer from the Internet.
3. Run a quick scan of your computer. For a guide on how to run a quick scan, please see this article.
4. When MEM:Trojan.Win64.EquationDrug.gen is detected, restart the computer.
5. Run a full scan to remove the malware. For a guide on how to run a full scan, please see this article.
6. Connect the computer to the Internet again.