Skip to main content
Tech Radar TechRadar the technology experts
Sign in
  • View Profile
  • Sign out
RSS
Asia
flag of Singapore
Singapore
Europe
flag of Danmark
Danmark
flag of Suomi
Suomi
flag of Norge
Norge
flag of Sverige
Sverige
flag of UK
UK
flag of Italia
Italia
flag of Nederland
Nederland
flag of België (Nederlands)
België (Nederlands)
flag of France
France
flag of Deutschland
Deutschland
flag of España
España
North America
flag of US (English)
US (English)
flag of Canada
Canada
flag of México
México
Australasia
flag of Australia
Australia
flag of New Zealand
New Zealand
  • Phones
  • Computing
  • TVs
  • AI
  • Streaming
  • Health
  • Audio
  • VPN
  • More
    • Cameras
    • Home
    • News
    • Reviews
    • Opinion
    • How to
    • Versus
    • Deals
    • Coupons
    • Best
Tech Radar Pro
Tech Radar Gaming
Trending
  • Amazon Prime Day
  • Smart Home Week
  • Nintendo Switch 2
  • Best VPN
  • ChatGPT
  • Best web hosting
  • NYT Wordle today
  • Best laptop

Recommended reading

Representational image of a cybercriminal
Pro Why paying the ransom is not the answer
Representational image of data security
Pro Ransomware attacks can't be eliminated, but collaboration can increase resilience
A laptop with a red screen with a white skull on it with the message: "RANSOMWARE. All your files are encrypted."
Security Nearly half of companies say they pay up ransomware demands - but here's why that could be a bad idea
cyber_attacks_festival_india
Pro How emerging ransomware trends can help inform payment decisions
An abstract image of a lock against a digital background, denoting cybersecurity.
Security More than 7 out of 10 businesses worldwide were hit by ransomware in 2024: here's what you need to know about this epidemic
Group of hard disk drives
Security Immutable backup storage is the best protection against ransomware, but many businesses don’t have it
Abstract image of cyber security in action.
Pro AI is rewriting the ransomware playbook - can businesses keep up?
  1. Computing
  2. Computing Security
  3. Cyber Crime

How to remove ransomware without paying

How-to
By Cat Ellis published 2 July 2017

Stop ransomware in its tracks, and rescue your files if your PC has already been infected

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.

Introduction

Introduction

Ransomware – software that encrypts your files or locks your screen until you pay its creators a fee – is no longer the preserve of malicious coders. Virus-writers are now offering their creations for sale on the black market for less tech-savvy criminals to distribute, in return for a slice of the profits.

This new tactic means ransomware is spreading faster than ever, and criminals are becoming more inventive with their tactics.

As with all malware, prevention from ransomware is better than cure: only download software from trusted sources, don't open unexpected email attachments, question any new programs you don't remember downloading, and remember that if something sounds too good to be true, it almost certainly is.

However, it's not always possible to stop stealthy attacks – sometimes all it takes is visiting a website that's been compromised – but there are ways to avoid disaster and remove ransomware that slips through the net.

Page 1 of 4
Page 1 of 4
1. Make backups and a rescue disc

1. Make backups and a rescue disc

If your PC isn't yet infected, you can put measures in place immediately to protect yourself and your data from ransomware.

You should already be making regular backups of your most valuable files – not only as protection from ransomware and viruses, but also from file corruption, disk damage, and theft or loss of your machine. It might seem like a hassle, but it doesn't have to be.

AOMEI Backupper is a free tool that takes the fuss out of this essential part of PC housekeeping, making it easy to back up your whole system, a drive, a partition, or individual files. You can also clone one drive to another with a few clicks, and make bootable rescue media for emergencies like a ransomware infection.

Also make sure you have the latest updates for all your software, to patch any newly discovered vulnerabilities. Check your Windows settings to ensure you receive automatic updates, and install Secunia Personal Software Inspector to identify software in need of patching. The first time you run Secunia PSI it will prompt you to install Microsoft Update; you can ignore this if you're running Windows 8, 8.1 or 10.

Page 2 of 4
Page 2 of 4
2. Boost your PC's security

2. Boost your PC's security

An online security tool is essential to stop ransomware infections - they don't have to cost a penny, check out our best free antivirus programs - but bear in mind that some are more comprehensive than others. Avira Free Antivirus is our weapon of choice, and Avast Free Antivirus also offers particularly good for blocking and removing ransomware.

Security stalwart Malwarebytes is working on a tool specifically designed to stop ransomware, and you can try it for free before it's rolled into the company's premium security suite. It's still in beta, so it's not perfect, but it provides an extra layer of security on top of your existing antivirus.

Page 3 of 4
Page 3 of 4
3. Unlock files and remove ransomware

3. Unlock files and remove ransomware

If you're unfortunate enough to fall victim to a ransomware attack, your immediate instinct might be to pay the fine and get everything back working as soon as you can. Most criminals will indeed remove the ransomware unlock your files once you've opened your wallet, but there's no guarantee.

If your PC is locked by ransomware, try inserting your Windows disc, then rebooting. The machine should boot from the disc rather than your hard drive (if not, press [F8] before Windows loads and use the BIOS menu to change the boot order), and you'll be given the option to repair or reinstall the operating system.

Alternatively, you can use the Advanced Boot Options menu (again via the BIOS) to access Windows System Restore, to remove the ransomware by restoring your PC to a point before it became infected.

Restoring or repairing your system should remove ransomware, but your files may still be encrypted – or even deleted. That isn't a problem if you've been making regular backups though, and AOMEI Backupper will enable you to restore them in minutes.

Page 4 of 4
Page 4 of 4
Cat Ellis
Cat Ellis
Social Links Navigation
Homes Editor

Cat is TechRadar's Homes Editor specializing in kitchen appliances and smart home technology. She's been a tech journalist for 15 years, having worked on print magazines including PC Plus and PC Format, and is a Speciality Coffee Association (SCA) certified barista. Whether you want to invest in some smart lights or pick up a new espresso machine, she's the right person to help.

See more Computing How Tos
Read more
Representational image of a cybercriminal
Why paying the ransom is not the answer
Representational image of data security
Ransomware attacks can't be eliminated, but collaboration can increase resilience
A laptop with a red screen with a white skull on it with the message: "RANSOMWARE. All your files are encrypted."
Nearly half of companies say they pay up ransomware demands - but here's why that could be a bad idea
cyber_attacks_festival_india
How emerging ransomware trends can help inform payment decisions
An abstract image of a lock against a digital background, denoting cybersecurity.
More than 7 out of 10 businesses worldwide were hit by ransomware in 2024: here's what you need to know about this epidemic
Group of hard disk drives
Immutable backup storage is the best protection against ransomware, but many businesses don’t have it
Latest in Cyber Crime
A white woman with long brown hair in a ponytail looks down at her computer in a distressed manner. She is holding her forehead with one hand and a credit card with the other
5 new frightening cyber scams to look out for in 2025
A person scanning a QR code on a smartphone
Quishing is the new QR code scam you need to watch out for – here's how to stay safe
Ransomware on the rise: how small and medium-sized businesses can achieve cyber resilience during turbulent times
Ransomware on the rise: how small and medium-sized businesses can achieve cyber resilience during turbulent times
Text Phishing Scams
Do not fall for this dangerous Amazon shopping scam
The North Face jacket
Thousands of North Face customers accounts hacked, personal data stolen
Smartphone hacked with data flow in the background
9 signs your phone has been hacked
Latest in How Tos
A woman dances on a friend's shoulders at the Glastonbury Festival held at Worthy Farm, in Pilton, Somerset on June 29 near Glastonbury, England. The festival, founded in 1970, has grown into one of the largest outdoor green field festivals in the world.(Photo by Matt Cardy/Getty Images)
How to watch Glastonbury on BBC iPlayer (it's FREE)
Jake Paul and Julio Cesar Chavez Jr. in their face off for their fight on 28 July.
How to watch Jake Paul vs Chavez Jr live on DAZN tonight – best PPV prices, start time
Sione Katoa of the Sharks scores a try during the NRL Preliminary Final match between the Penrith Panthers and the Cronulla Sharks
NRL Premiership live stream 2025: how to watch rugby online, FREE options, streaming guide
Maro Itoje in training for British & Irish Lions
Western Force vs Lions FREE streams: How to watch British & Irish Lions tour live online from anywhere now
Charli XCX playing at the 67th Annual Grammy Awards
How to watch Saturday at Glastonbury: live stream the 2025 festival – ft. Neil Young, Charli XCX & Kneecap
 British rapper Loyle Carner performs live on stage during a concert during day 2 of Lollapalooza 2024
How to watch Friday at Glastonbury 2025: live stream Day 1 ft. The 1975, Loyle Carner, Lewis Capaldi
LATEST ARTICLES
  1. 1
    Beelink ME mini NAS mini PC review
  2. 2
    Apple could finally go all-screen with the iPad Pro, as new leak hints at slimmest-ever bezels
  3. 3
    Candy-colored kitchen appliances are everywhere this summer, and these are 5 of the cutest
  4. 4
    I used to play Marvel Snap every day but I’m so frustrated by its recent changes I’m leaving for my new favorite card game
  5. 5
    After years of using Things 3, iOS 26 could move me to Reminders

TechRadar is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.

  • About Us
  • Contact Future's experts
  • Contact Us
  • Terms and conditions
  • Privacy policy
  • Cookies policy
  • Advertise with us
  • Web notifications
  • Accessibility Statement
  • Careers

© Future US, Inc. Full 7th Floor, 130 West 42nd Street, New York, NY 10036.

Please login or signup to comment

Please wait...