Home » Tech Guides

Against WannaCrypt: How To Recover Your Files From WannaCrypt Ransomware

Updated on

WannaCrypt cyber-attack has already affected more than 200 thousand systems in around 150 countries the world over. From jpeg to raw and jar to txt, the ransomware encrypts almost every file extension a user might have on computer. Sadly, there is no fix for WannaCry available at this time. Antivirus companies and cybersecurity experts are hard at work looking for ways to decrypt files on infected computers, but no means of third-party decryption are available right now. But apart from following the instructions to pay the ransom, there are still three things we can do to reduce the loss.

1. Remove the Wannacrypt ransomware ASAP.

If you wish to attain security in your system again, then you got to get rid of the WannaCrypt Ransomware first. Follow these instructions and make sure that you have manually removed it from your system.

Step 1. Use folder options to make every file and folder visible

Step 2. Reboot the PC in Safe Mode


Step 3. Enter Task Manager and terminate all suspicious processes


Step 4. Prevent the ransomware from booting



2. Decrypt the Ransomware or recover the encrypted files from WannaCrypt.

Since WannaCrypt Ransomware uses the RSA + AES encryption method to encrypt data files, it is quite tough to decrypt them, even with the assistance of a paid tool. So far no means of third-party decryption are available right now.

Nevertheless, you should not get disappointed so soon. WannaCrypt doesn’t directly encrypt the actual file. Instead, it first makes a shadow copy of the file and encrypts its copy. The original files are deleted from the system. While you can’t decrypt the copied files, you can still get your deleted files back by taking the assistance of any secure data recovery software.

We recommend using Wondershare Data Recovery software to get your deleted files back.

It is a risk-free and cost-effective tool that runs on almost every version of Windows. It is difficult to recover all the encrypted files, but it can help you recover part of the data, depending on the file type, file number, hard disk status and so on. Due to it 7-day-money-back policy, we would suggest most victims have a try.

Step 1. Launch the data recovery tool:


Step 2. Select the location where your files have been encrypted by Wannacrypt

WannaCrypt Ransomware

Step 3. Restore your files from Wannacrypt encryption

WannaCrypt decryption

3. Take precautionary measures protect computer and mobile phones further

Firstly, always backup your data-WannaCrypt Ransomware is just one example of how dreadful computer malware can be. Therefore, it is always recommended to keep a backup of your data.

Secondly, stay up to date- Make sure that your devices are running on updated software and that it doesn’t have any vulnerability that can be exploited by an attack.

Thirdly, get anti-virus software- You should install reliable and secure anti-virus software on your system. Not just your PC, you should also install anti-virus software on your mobile phones as well. Additionally, keep updating your anti-virus to keep your system secure.

Leave a Comment