.WCRY File

A WCRY file is a file encrypted by WannaCryptor ransomware infection utilized by cybercriminals. It contains a user's file, such as a .BAK, .DOC, .MPG, or .PDF file, encrypted by the virus. WCRY files became prevalent in 2017.

The WannaCry (WCry) malware is highly dangerous. The purpose of the virus is to take your files hostage and force you to pay the cybercriminals (by way of bitcoin) to unlock your files. The virus is primarily spread via phishing spam emails designed to coax the victim into opening a malicious email attachment. Once the virus affects your computer it begins scrambling your files, renaming them, and encrypting them. It appends the WCRY extension on to the file extension. For example, your example.pdf file becomes example.pdf.wcry. The virus then generates a .TXT ransom note informing you of the takeover and what you need to do to recover your files.

A second version of the WannaCry virus, called Wana Decrypt0r 2.0, also spread in 2017. This version appended the .WNCRY extension to affected files.

There is no program currently available to effectively restore your files. If you backup your files you can execute a full system restore. Otherwise, the only known way to decrypt your infected files is to pay the perpetrator for the private key and decrypt program.