Page 1 of 1

How to decrypt my files from Wanna Cry without Ransom

PostPosted: Fri Jun 02, 2017 3:07 am
by sarahjo
I was recently attacked by the Wannacry ransomware. I was using a windows 7. Need to know if there is any way by chance i can recover my data without paying ransom.

Re: How to decrypt my files from Wanna Cry without Ransom

PostPosted: Mon Jun 05, 2017 7:37 am
by IneptVagrant
It depends on a lot of things. There isn't a way to recover the system as a whole, you'll eventually want to wipe and start over.

If you want individual files, depends on your hardware and where the files are located (see https://securelist.com/78609/wannacry-m ... infection/), and you'll need a file system level recovery tool (see https://www.lifewire.com/free-data-reco ... ls-2622893)

If you have not rebooted the machine, there are some tools to recover using the encryption key that is still in memory, https://github.com/aguinet/wannakey and https://github.com/gentilkiwi/wanakiwi