How to recover WannaCrypt encrypted files (decrypt .wncry)

Jean updated on Sep 17, 2020 to Data Recovery | How-to Articles

Save the $300 in your pocket, and follow the right way to free recover Ransomware virus WannaCry/WannaCrypt encrypted files, and decrypt .wncry/.wcry files as many as possible. It's good to know that WannaCrypt only encrypts the copied files and deletes the original. Now, here is your chance to download EaseUS Data Recovery Wizard to restore deleted files before they were encrypted and turned to .wncry or .wcry file formats.

Save $300 in your pocket and don't pay the ransom to decrypt files

Worried? Anxious? Panic? We know exactly what you're suffering since May 12, 2017 - WannaCrypt, aka WannaCry/Wcrypt and its variant WannaCrypt0r, a type of computer virus, worm, ransomware has attacked an infinite number of worldwide computers, and the major group of victims is computers in the same LAN, for example, hospitals, banks, institutions or even the gas station. As you've already got the information, WannaCrypt hits initially UK's National Health Service, the logistics firm FedEx, and later PetroChina.

Please calm down in the large Cyber-attack chaos. The threat is real, so be bold and dig every way out to revive from the catastrophe. We're still not officially informed who created WannaCrypt, only know that it's crazily sweeping the world, encrypting hundreds of types of computer files, turning them into .wncry or .wcry file formats and blackmailing $300 bitcoin for encrypted file recovery within 3 days of the attack.

It announces the bitcoin investment of decrypting .wncry/.wcry files

May 12 - 14: $300
May 15: price doubled ($600)
May 19: your files will be permanently deleted

WannaCrypt virus encrypts files and demand 300$ ransom

The shameful trick threatened people and organizations heavily because data loss is definitely the last thing they wish to happen from the WannaCrypt attack. Have you paid the ransom yet? Feel hesitated? Then you did the right thing! Don't pay the ransom, and here's your new chance to rescue encrypted files.

2 typical ways that Ransomware/virus encrypts computer files

You got to know the 2 typical ways of how ransomware virus encrypts computer files. One, simply it encrypts the file; Two, copy the original file and encrypt it, after which delete the original. What's the difference?

The former way of file encryption is the most dreadful, only paying the secret key can users recover the encrypted files; the latter way then sounds not so scary, paying the demanded ransom fee, so your original files will be returned.

The way of WannaCrypt encrypting files

Network engineers found that WannaCrypt takes the second encryption way to encrypt computer data files. We can easily understand the process by checking the diagram.

Step 1 _ read the original files into the ram and start to encrypt files.
Step 2 _ create encrypted files.
Step 3 _ delete the original files.

WannaCrypt encrypts copied files and deletes the original files

What do we learn from the WannaCrypt's way of encrypting files

Good news if you've read and understood the WannaCrypt's way to encrypt computer files. It's not the only choice to spend hundreds of dollars to decrypt .wncry/.wcry files. Instead, the ultimate cost can be $0. 

The simple & free recovery tool you need

Yes, it's proven to be possible to recover WannaCrypt encrypted files, only make it clear that we're not talking about the 'encrypted' but 'original' files that were deleted by the ransomware after it finished the encryption.

Speaking here, all you need is to download a professional third-party data recovery tool, which specializes in deleted file recovery with high reputation. With this in mind, give it a try with EaseUS Data Recovery Wizard, the free data recovery software that has been serving the market for over a decade.

Ultimate guide for .wncry/.wcry virus removal & file recovery

Before trying to decrypt .wncry/.wcry files and recover WannaCrypt encrypted files with the suggested data recovery software, click for the solution to remove WannaCrypt virus from your computer.

Step 1. Select a location to scan.

Launch EaseUS Data Recovery Wizard, hover on the partition, external hard drive, USB, or memory card from which you want to perform data recovery, and then click "Scan".

select a location and click scan

Step 2. Select the files you want to recover.

Wait until the scanning completes. Afterward, select the lost files you want to recover. If you need, double-click the file to preview its content.

Choose files to recover

Step 3. Recover lost data.

After choosing the files, click "Recover" and choose a location on another drive to save the recovered files.

Recover lost data

The chances of encrypted file recovery with EaseUS Data Recovery Wizard

We've explained how EaseUS Data Recovery Wizard works and rescues the files that were encrypted by WannaCrypt ransomware virus, and you must notice that deleted files recovery is simple, easy and fast, however, not including the situation in which new data has overwritten the deleted items.

Let's pray your deleted files has not been overwritten yet, so EaseUS recovery tool will do it best to help you make through a hard time, and maximumly reduce your pain and loss. 

Luckily you're not one of the WannaCrypt victims? Be serious, take the prevention measures right away. 

Was This Page Helpful?


Frequently Asked Questions

1. Why choose EaseUS Data Recovery Wizard?

"EaseUS Data Recovery Wizard is the best we've seen. It's far from perfect, partly because today's advanced disk technology makes data-recovery more difficult than it was with the simpler technology of the past, but it's fast and efficient..."PCMag

"The first thing you'll notice about EaseUS Data Recovery Wizard Pro is that its interface is very clear and uncluttered, with only a small collection of self-explanatory controls. You won't find lots of extra options hidden in a system of hidden menus, either; what you see really is what you get."techradar

"Recover lost files, even after deleting a partition or formatting your drive."Macworld

2. Why cannot I recover 2GB data for free?

It is recommended to check the version installed is Free or Trial because they are different versions.

Trial has data preview function but cannot save any files, while the Free version enables to recover 2 GB files. The default free space is 500 MB and you may share the product on social media to get another 1.5 GB.

3. Why cannot the recovered files be opened?

A file is saved as 2 parts on the storage device: directory info (which is comprised by file name, time stamp and size info, etc.) and data content.

If the files with original file names and folder structures cannot be opened, one possible reason is the corrupted directory info. There is still a chance to recover the data content with the RAW Recovery method in our software.

4. Why isn't it suggested to recover the files back to the original drive?

The storage structure of the lost files would be altered or damaged by any changes on the drive. If you save the recovered files back to the same drive, the original data structures and data content would be corrupted or overwritten, which causes permanent data loss. So you should prepare another disk to save the files.

5. How can I check whether my data is recoverable or not before purchase?

The Free version helps you save 2GB files, so verify the recovery quality of our product before purchase.

6. How long does it take to scan the drive?

It strongly depends on the capacity of your hard drive and the performance of your computer. As reference,most drive recoveries can be completed in around 10 to 12 hours for a 1-TB healthy hard drive in general conditions.

About Data Recovery Wizard

It's super easy to recover 250+ types of files after deletion, disk formatting and virus infection. Click the links and compare the difference of each version.