How to recover .WNCRY files

[deanlauchenco]

Hi, I am a victim of this WannaCry ransomware and most of my files are now encrypted. File extensions were changed to .WNCRY. To site an example, document files are renamed from mydocs.docx to mydocs.docx.WNCRY. Some were also renamed with random characters such as b6ysq1.docx.WNCRY.

Are there any decryptor tools to recover .WNCRY files? How about the removal process for this WannaCry virus, is it complicated? Please I need every help I can get to remove this thing from my computer. Most of all, I need a tool to recover all files that are now having .WNCRY extension. I cannot open them. It gets an error each time I execute these files.

Aside from having these modified files, all folders now have @WannaDecryptro@.exe and @Please_Read_me@.txt ransom note. Lock screen is also visible on my desktop with the following messages:

Ooops, your important files are encrypted.
If you see this text, but don’t see “Wanna Decryptor” window, then your antivirus removed the decrypt software or you deleted if from your computer.
If you need your files you have to run the decrypt software.
Please find an application file named “WannaDecryptor@.exe” in any folder or restore from the antivirus quarantine.
Run and follow the instructions.

That is my current desktop wallpaper.

Topic

[MFixer]

Self Help Guide

For easy and free removal of WNCRY Virus, we suggest that you carry out the following instructions. We will use only free and effective malware removal tools on this procedure.

1. Download the following WNCRY Virus removal tools

– Click to download MalwareBytes Anti-Malware
– Click to download Adware Cleaner

Once downloaded, install the programs using default configuration. No need to change on the current settings. Updating may be necessary after the installation.

2. Reboot computer in safe mode

Rebooting the computer in Windows Safe Mode reduces the effectiveness of WNCRY Virus and other malware. Most malware and virus do not function fully while in Safe Mode. You may also scan the PC on normal boot-up; hence, we may not guarantee the efficiency of virus removal.

3. Scan with Malwarebytes Anti-malware

– Open Malwarebytes Anti-malware
– On the main window, click on Scan tab
– Make sure that Threat Scan (Recommended) is selected
– Click on Start Scan button to start finding WNCRY Virus and other malicious programs
– After the scan, select all identified threats and click on Remove Selected button
– If it prompts you that computer needs to be restarted, please select No
– Close Malwarebytes Anti-malware program

4. Run another scan using AdwCleaner

– Open AdwCleaner.
– Once opened, click on Scan button to search for malicious applications including WNCRY Virus.
– To remove WNCRY Virus including all detected adware and malware, click on the Clean button.
– AdwCleaner will prompt you to close any running application as it will need to restart the computer.
– Click OK to restart the computer.

After restarting the computer, you may run additional virus scanner if anti-virus is installed.

[Author]

Replies