The WannaCry ransomware attack is an ongoing worldwide cyberattack by the WannaCry ransomwarecryptoworm, which targets computers running the Microsoft Windows operating system by encrypting data and demanding ransom payments in the Bitcoin cryptocurrency.
The attack started on Friday, 12 May 2017, and has been described as unprecedented in scale, infecting more than 230,000 computers in over 150 countries. The worst-hit countries are reported to be Russia, Ukraine, India and Taiwan, but parts of Britain’s National Health Service (NHS), Spain’s Telefónica, FedEx and Deutsche Bahn were hit; along with many other countries & companies worldwide.
WannaCry spreads across local networks and the Internet to systems that have not been updated with the most recent security updates, to directly infect any exposed systems. To do so it uses the EternalBlue exploit developed by the U.S. National Security Agency (NSA),which was released by The Shadow Brokers two months before.A “critical” patch had been issued by Microsoft on 14 March 2017 to remove the underlying vulnerability for supported systems, nearly two months before the attack, but many organizations had not yet applied it. Those still running exposed older, unsupported operating systems such as Windows XP and Windows Server 2003, were initially at particular risk but Microsoft has now taken the unusual step of releasing updates for these operating systems for all customers.
Fortunately there is already a small application released by “NoToRansomWares2017” to remove the WannaCry initial release and the WannaCry v2.0.
You can get it from here:
Wanna Cry Remover helps you to clean your infected operating system by automatically searching for known areas where the Wanna Cry ransomware resides. It will also disable your SMB v1 feature to prevent further attacks and stop the spreading of the wanna cry ransomware.
Wanna Cry remover will automatically delete associate files with the wanna cry and will try to decrypt your personal files. Including Word Documents, Power points, Excel files, Text files, Pictures, Musics, Compressed Files (*.rar, *.zip, *.7z).
But! it cannot decrypt other files aside from the list mentioned above. Because wanna cry is using different encrypting algorithm to encrypt application related files (*.exe, *.msi, *.dll, etc…)
Hope this helps.
Just found it on a thread from the Deepweb.
NOTE: If there is a new strain of wanna cry, the application will not be able to decrypt your files. It is only for the initial release of wanna cry and the new release aka. v2.0
Here is the download link: