Remove Wannacry ransomware from your computer

This is a type of threat, known as ransomware, which displays alerts that keep asking you to send money to unlock your computer. A ransomware restricts access to the computer and demands a ransom to be paid to the creator of the threat to use the computer. The threat instructs the user to send money by bit coins. To remove this threat, download and run a scan with the Norton Bootable Recovery Tool.

The files encrypted by Wannacry ransomware will remain encrypted. Norton products do not decrypt files that have been affected by these threats. However, you can replace the files from a previous backup if you are using a backup solution. You can also restore your files from Norton Online Backup if you have configured it to backup your files.

STEP 1

Download Norton Bootable Recovery Tool

  1. Download and install the Norton Bootable Recovery Tool on a computer that is not infected.

  2. Click Download.

  3. Follow the on-screen instructions to download and save the Norton Bootable Recovery Tool ISO file on your computer.

  4. Create the bootable DVD or USB recovery media with the downloaded ISO file.

STEP 2

Run a scan using Norton Bootable Recovery Tool

  1. Insert the recovery media (Norton Bootable Recovery Tool DVD or USB device) and then turn on or restart your computer.

  2. Enter the BIOS mode by pressing the key that appears on the screen immediately after your computer restarts.

  3. Select the DVD or the USB drive on which you created Norton Bootable Recovery Tool, and then press Enter.

    If you use a UEFI-enabled computer, select the recovery media under the Legacy Boot option instead of the UEFI Boot option. The recovery media is the Norton Bootable Recovery Tool DVD or USB drive.

  4. The Norton Bootable Recovery Tool starts automatically after the countdown.

    If the boot menu appears, in the Welcome to NBRT page, select Boot.

    If the boot fails, select Boot (Basic Video).

  5. In the Select Language drop-down list, select your preferred language, and click OK.

  6. Read the license agreement, and then click Agree.

  7. Click Start Scan.

  8. In the Scan Completed window, review the scan results.

    By default, all detected threats have a selected remediation action. You can also select the appropriate action for each of the threats.

    Review the scan results carefully before resolving the threats, because the files that are removed cannot be restored.

  9. Click Fix.

  10. In the Confirmation window, click OK.

  11. In the Remediation window, click Continue.

  12. In the Reboot your computer window, click Scan Again.

  13. In the Scan Completed window, review the scan results, and click Fix.

  14. In the Confirmation window, click OK.

  15. In the Remediation window, click Continue.

  16. Click Reboot.

Thank you!

Thank you for using Norton Support.

< Back

Was this information helpful?

DOCID: v122270824_EndUserProfile_en_us
Operating System: Windows
Last modified: 09/12/2017