How to recover WannaCrypt encrypted files (decrypt .wncry)

Save the $300 in your pocket, and follow the right way to free recover Ransomware virus WannaCrypt encrypted files, and decrypt .wncry/.wcry files as many as possible. It's good to know that WannaCrypt only encrypts the copied files and deletes the original. Now, here is your chance to download EaseUS Data Recovery Wizard to restore deleted files before they were encrypted and turned to .wncry or .wcry file formats.

Table of Contents

Save $300 in your pocket and don't pay the ransom to decrypt files

Worried? Anxious? Panic? We know exactly what you're suffering since May 12, 2017 - WannaCrypt, aka WannaCry/Wcrypt and its variant WannaCrypt0r, a type of computer virus, worm, ransomware has attacked an infinite number of worldwide computers, and the major group of victims is computers in the same LAN, for example, hospitals, banks, institutions or even the gas station. As you've already got the information, WannaCrypt hits initially UK's National Health Service, the logistics firm FedEx, and later PetroChina.

Please calm down in the large Cyber-attack chaos. The threat is real, so be bold and dig every way out to revive from the catastrophe. We're still not officially informed who created WannaCrypt, only know that it's crazily sweeping the world, encrypting hundreds of types of computer files, turning them into .wncry or .wcry file formats and blackmailing $300 bitcoin for encrypted file recovery within 3 days of the attack.

It announces the bitcoin investment of decrypting .wncry/.wcry files

May 12 - 14: $300
May 15: price doubled ($600)
May 19: your files will be permanently deleted

WannaCrypt virus encrypts files and demand 300$ ransom

The shameful trick threatened people and organizations heavily because data loss is definitely the last thing they wish to happen from the WannaCrypt attack. Have you paid the ransom yet? Feel hesitated? Then you did the right thing! Don't pay the ransom, and here's your new chance to rescue encrypted files.

2 typical ways that Ransomware/virus encrypts computer files

You got to know the 2 typical ways of how ransomware virus encrypts computer files. One, simply it encrypts the file; Two, copy the original file and encrypt it, after which delete the original. What's the difference?

The former way of file encryption is the most dreadful, only paying the secret key can users recover the encrypted files; the latter way then sounds not so scary, paying the demanded ransom fee, so your original files will be returned.

The way of WannaCrypt encrypting files

Network engineers found that WannaCrypt takes the second encryption way to encrypt computer data files. We can easily understand the process by checking the diagram.

Step 1 _ read the original files into the ram and start to encrypt files.
Step 2 _ create encrypted files.
Step 3 _ delete the original files.

WannaCrypt encrypts copied files and deletes the original files

What do we learn from the WannaCrypt's way of encrypting files

Good news if you've read and understood the WannaCrypt's way to encrypt computer files. It's not the only choice to spend hundreds of dollars to decrypt .wncry/.wcry files. Instead, the ultimate cost can be $0. 

The simple & free recovery tool you need

Yes, it's proven to be possible to recover WannaCrypt encrypted files, only make it clear that we're not talking about the 'encrypted' but 'original' files that were deleted by the ransomware after it finished the encryption.

Speaking here, all you need is to download a professional third-party data recovery tool, which specializes in deleted file recovery with high reputation. With this in mind, give it a try with EaseUS Data Recovery Wizard, the free data recovery software that has been serving the market for over a decade.

Ultimate guide for .wncry/.wcry virus removal & file recovery

Before trying to decrypt .wncry/.wcry files and recover WannaCrypt encrypted files with the suggested data recovery software, click for the solution to remove WannaCrypt virus from your computer.

Step 1. Select a location to scan.

Launch EaseUS Data Recovery Wizard, hover on the partition, external hard drive, USB, or memory card from which you want to perform data recovery, and then click "Scan".

select a location and click scan

Step 2. Select the files you want to recover.

Wait until the scanning completes. Afterward, select the lost files you want to recover. If you need, double-click the file to preview its content.

Choose files to recover

Step 3. Recover lost data.

After choosing the files, click "Recover" and choose a location on another drive to save the recovered files.

Recover lost data

The chances of encrypted file recovery with EaseUS Data Recovery Wizard

We've explained how EaseUS Data Recovery Wizard works and rescues the files that were encrypted by WannaCrypt ransomware virus, and you must notice that deleted files recovery is simple, easy and fast, however, not including the situation in which new data has overwritten the deleted items.

Let's pray your deleted files has not been overwritten yet, so EaseUS recovery tool will do it best to help you make through a hard time, and maximumly reduce your pain and loss. 

Luckily you're not one of the WannaCrypt victims? Be serious, take the prevention measures right away. 

Was This Page Helpful?

Updated by Brithny

Brithny is a technology enthusiast, aiming to make readers' tech life easy and enjoyable. She loves exploring new technologies and writing technical how-to tips. On her spare time, she loves sharing things about her favorite singer - Taylor Swift on her Facebook or Twitter.

Read full bio

Written by Jean

Author Jean has been writing tech articles since she was graduated from university. She has been part of the EaseUS team for over 5 years. Her special focuses are data recovery, disk partitioning, data space optimization, data backup and Mac OS. By the way, she's an aviation fan!

Read full bio

Product Reviews

TrustScore 4.7 | 323 reviews
  • EaseUS Data Recovery Wizard is a powerful system recovery software, designed to enable you to recover files you’ve deleted accidentally, potentially lost to malware or an entire hard drive partition.

    Read More
  • EaseUS Data Recovery Wizard is the best we've seen. It's far from perfect, partly because today's advanced disk technology makes data-recovery more difficult than it was with the simpler technology of the past.

    Read More
  • EaseUS Data Recovery Wizard Pro has a reputation as one of the best data recovery software programs on the market. It comes with a selection of advanced features, including partition recovery, formatted drive restoration, and corrupted file repair.

    Read More