How to remove ransomware? Recently, we all know that the digital world is being shaken by the WannaCry Ransomware cryptolocker virus attack or also known as WNCR, WannaCryptor, Wanna Decryptor, WannaCrypt and WCry.
Thousands of computers around the world are random targets made by attackers for profit. Even an agency in Indonesia fell victim to this WannaCry Ransomware virus.
What is Ransomware?
Ransomware is malware or malware that aims to lock the victim’s data so that the victim is forced to pay a ransom.
Some time ago, Wannacry ransomware shocked the world because it managed to infect several companies around the world and cause huge losses.
How to remove Ransomware
1. Remove with antivirus
Antivirus was the first software that became a solution to deal with various viruses, including Ransomware.
Well, if you get Ransomware, try to remove it with an antivirus. For the antivirus itself, you can first try the antivirus on your laptop.
However, usually the antivirus will not be able to remove the Ransomware. Well, many recommend using ESET antivirus.
So, when the Ransomware first appeared, this antivirus was considered capable of overcoming the Ransomware.
To download ESET antivirus, you can go directly to the official website. This antivirus is paid, but you can use the trial version for 30 days.
2. Install Windows
Well, if this method is not done for a long time. Your laptop is attacked by Ransomware, almost all file extensions are converted to .derp extensions.
Since you definitely don’t want to bother, we just told him that the easiest way to fix this is to install Windows.
This method is really very powerful. However, you must be willing if all the files on the laptop are lost, because what you will do is reinstall, deleting all partitions from the hard drive.
If you’re sure you want to do this, read how to install Windows 10 complete with images. In this article, you will be guided on how to install Windows 10 to completion.
Why do we recommend using Windows 10? The reason is to keep getting updates from Microsoft. The problem is that currently Windows 7 is no longer supported.
3. Delete via safe mode
Safe Mode is one of the built-in Windows features that is often used to solve various problems. When Windows is in safe mode, only certain features are enabled (which is undoubtedly limited).
Well, this feature is also often used to remove various viruses. As for the Ransomware itself, it can be solved that way or not, but it doesn’t hurt to try.
Then you just need to stop all suspicious processes in Task Manager. Like please go to Task Manager (press Ctrl + Alt + Del) then select the suspicious process and click End Task.
In addition, you can also use Registry Editor. Like, enter by pressing Windows + R then type Regedit and press Enter.
After that, browse files which says Crypt and WannaCry then delete. if so, please restart the laptop. You will automatically enter Windows mode normally.
4. Decrypt virus
Usually, in the folder where the file is affected by the virus, there is a file with the format. Txt containing the message. The gist of this message is that users must purchase Rryomware decryptor so that files can be recovered.
Well, maybe this is one of those crook-run businesses. So users need to spend some money to pay for this decryption key.
If the file infected with the virus is a very important file, this may be the best way to restore the file.
The problem is that it very rarely works any other way except the decryptor with the Ransomware decryptor.
Well, those were the various ways that you can use or apply to eliminate or overcome Ransomware virus. Of the various ways above, the last method is the most effective way to restore your files.
However, if the files on the laptop are not very important, then it is better to use the third way, i.e. reinstall Windows by deleting all partitions from the hard drive.
How to prevent ransomware
If your computer is still protected from ransomware attacks, be grateful that you took the time to block this virus attack. Here’s what you need to do to avoid ransomware.
1. Do not click on suspicious file download/download links in the email
When you receive an email from an unknown sender and it comes with an attachment or link that you don’t recognize, it’s best not to download/click on the email.
Check the sender’s email address, if it’s from someone you already know, you can confirm first.
If you don’t recognize the return address, it’s best to ignore the file or link contained in the email.
2. Disable SMB 1.0 on the system
Microsoft recommends that Windows users disable SMB 1.0, which is a gateway for ransomware to attack its users’ computers.
To disable this feature, you can access the Windows Control Panel. Below is a guide to disabling SMB 1.0.
- Open the Control Panel
- select program
- Select programs and features
- Select Turn Windows Features On or Off
- Uncheck SMB 1.0 / CIFS file sharing support
- Restart PC/Laptop
3. Perform system or software updates regularly
System or software updates are the most effective way to prevent viruses.
Updates made by developers aim to resolve bugs in the software and improve the security of the software.
If the developer makes an update, it means for the convenience and safety of its users. For this, pay attention to the system and software you have, if they are out of date, update now.
You can also turn on the auto-update feature so you don’t have to check every day.
Well, that was our explanation on How to remove ransomware and how to prevent it from being attacked, I hope it can help you all.
Thanks for reading this article and don’t forget to read our other articles.