[foxh0und]

Your safest option then is to disable SMB.

[gerdesj]

Just SMBv1 in this case, here is how: https://support.microsoft.com/en-gb/help/2696547/how-to-enab...

Also, decent AV and anti spam and don't open email attachments without some prior analysis. Backups - good backups and check them at least weekly.

Actually just do all the boring stuff that IT Security have been recommending for years.

[ak39]

Thanks. Done it