Skip to main content
Tech Radar TechRadar the technology experts
Sign in
  • View Profile
  • Sign out
RSS
Asia
flag of Singapore
Singapore
Europe
flag of Danmark
Danmark
flag of Suomi
Suomi
flag of Norge
Norge
flag of Sverige
Sverige
flag of UK
UK
flag of Italia
Italia
flag of Nederland
Nederland
flag of België (Nederlands)
België (Nederlands)
flag of France
France
flag of Deutschland
Deutschland
flag of España
España
North America
flag of US (English)
US (English)
flag of Canada
Canada
flag of México
México
Australasia
flag of Australia
Australia
flag of New Zealand
New Zealand
  • Phones
  • Computing
  • TVs
  • AI
  • Streaming
  • Health
  • Audio
  • VPN
  • More
    • Cameras
    • Home
    • News
    • Reviews
    • Opinion
    • How to
    • Versus
    • Deals
    • Coupons
    • Best
Tech Radar Pro
Tech Radar Gaming
Trending
  • Back to school
  • Nintendo Switch 2
  • Best VPN
  • ChatGPT
  • NYT Wordle today
  • Best laptop
  • Best web hosting
Recommended reading
ransomware
Pro The first 24 hours after a ransomware attack – what should you do?
Representational image of data security
Pro Ransomware attacks can't be eliminated, but collaboration can increase resilience
A laptop with a red screen with a white skull on it with the message: "RANSOMWARE. All your files are encrypted."
Security Nearly half of companies say they pay up ransomware demands - but here's why that could be a bad idea
Code Skull
Pro Block the payout, brace for impact: navigating the potential ransomware payment ban
cyber_attacks_festival_india
Pro How emerging ransomware trends can help inform payment decisions
Ransomware
Security Hackers are abusing 'FileFix' technique to drop RATs during ransomware attacks
An abstract image of a lock against a digital background, denoting cybersecurity.
Security More than 7 out of 10 businesses worldwide were hit by ransomware in 2024: here's what you need to know about this epidemic
  1. Computing
  2. Computing Security
  3. Cyber Crime

How to remove ransomware without paying

How-to
By Cat Ellis published 2 July 2017

Stop ransomware in its tracks, and rescue your files if your PC has already been infected

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.

Introduction

Introduction

Ransomware – software that encrypts your files or locks your screen until you pay its creators a fee – is no longer the preserve of malicious coders. Virus-writers are now offering their creations for sale on the black market for less tech-savvy criminals to distribute, in return for a slice of the profits.

This new tactic means ransomware is spreading faster than ever, and criminals are becoming more inventive with their tactics.

As with all malware, prevention from ransomware is better than cure: only download software from trusted sources, don't open unexpected email attachments, question any new programs you don't remember downloading, and remember that if something sounds too good to be true, it almost certainly is.

However, it's not always possible to stop stealthy attacks – sometimes all it takes is visiting a website that's been compromised – but there are ways to avoid disaster and remove ransomware that slips through the net.

Page 1 of 4
Page 1 of 4
1. Make backups and a rescue disc

1. Make backups and a rescue disc

If your PC isn't yet infected, you can put measures in place immediately to protect yourself and your data from ransomware.

You should already be making regular backups of your most valuable files – not only as protection from ransomware and viruses, but also from file corruption, disk damage, and theft or loss of your machine. It might seem like a hassle, but it doesn't have to be.

AOMEI Backupper is a free tool that takes the fuss out of this essential part of PC housekeeping, making it easy to back up your whole system, a drive, a partition, or individual files. You can also clone one drive to another with a few clicks, and make bootable rescue media for emergencies like a ransomware infection.

Also make sure you have the latest updates for all your software, to patch any newly discovered vulnerabilities. Check your Windows settings to ensure you receive automatic updates, and install Secunia Personal Software Inspector to identify software in need of patching. The first time you run Secunia PSI it will prompt you to install Microsoft Update; you can ignore this if you're running Windows 8, 8.1 or 10.

Page 2 of 4
Page 2 of 4
2. Boost your PC's security

2. Boost your PC's security

An online security tool is essential to stop ransomware infections - they don't have to cost a penny, check out our best free antivirus programs - but bear in mind that some are more comprehensive than others. Avira Free Antivirus is our weapon of choice, and Avast Free Antivirus also offers particularly good for blocking and removing ransomware.

Security stalwart Malwarebytes is working on a tool specifically designed to stop ransomware, and you can try it for free before it's rolled into the company's premium security suite. It's still in beta, so it's not perfect, but it provides an extra layer of security on top of your existing antivirus.

Page 3 of 4
Page 3 of 4
3. Unlock files and remove ransomware

3. Unlock files and remove ransomware

If you're unfortunate enough to fall victim to a ransomware attack, your immediate instinct might be to pay the fine and get everything back working as soon as you can. Most criminals will indeed remove the ransomware unlock your files once you've opened your wallet, but there's no guarantee.

If your PC is locked by ransomware, try inserting your Windows disc, then rebooting. The machine should boot from the disc rather than your hard drive (if not, press [F8] before Windows loads and use the BIOS menu to change the boot order), and you'll be given the option to repair or reinstall the operating system.

Alternatively, you can use the Advanced Boot Options menu (again via the BIOS) to access Windows System Restore, to remove the ransomware by restoring your PC to a point before it became infected.

Restoring or repairing your system should remove ransomware, but your files may still be encrypted – or even deleted. That isn't a problem if you've been making regular backups though, and AOMEI Backupper will enable you to restore them in minutes.

Page 4 of 4
Page 4 of 4
Cat Ellis
Cat Ellis
Social Links Navigation
Homes Editor

Cat is TechRadar's Homes Editor specializing in kitchen appliances and smart home technology. She's been a tech journalist for 15 years, having worked on print magazines including PC Plus and PC Format, and is a Speciality Coffee Association (SCA) certified barista. Whether you want to invest in some smart lights or pick up a new espresso machine, she's the right person to help.

See more Computing How Tos
Read more
ransomware
The first 24 hours after a ransomware attack – what should you do?
Representational image of data security
Ransomware attacks can't be eliminated, but collaboration can increase resilience
A laptop with a red screen with a white skull on it with the message: "RANSOMWARE. All your files are encrypted."
Nearly half of companies say they pay up ransomware demands - but here's why that could be a bad idea
Code Skull
Block the payout, brace for impact: navigating the potential ransomware payment ban
cyber_attacks_festival_india
How emerging ransomware trends can help inform payment decisions
Ransomware
Hackers are abusing 'FileFix' technique to drop RATs during ransomware attacks
Latest in Cyber Crime
A white woman with long brown hair in a ponytail looks down at her computer in a distressed manner. She is holding her forehead with one hand and a credit card with the other
5 new frightening cyber scams to look out for in 2025
A person scanning a QR code on a smartphone
Quishing is the new QR code scam you need to watch out for – here's how to stay safe
Ransomware on the rise: how small and medium-sized businesses can achieve cyber resilience during turbulent times
Ransomware on the rise: how small and medium-sized businesses can achieve cyber resilience during turbulent times
Text Phishing Scams
Do not fall for this dangerous Amazon shopping scam
The North Face jacket
Thousands of North Face customers accounts hacked, personal data stolen
Smartphone hacked with data flow in the background
9 signs your phone has been hacked
Latest in How Tos
Dan Sheehan scores a try for the Lions
Australia vs British & Irish Lions: How to watch 1st Test live online from anywhere
Gabriel Book (Mark Gatiss) riding an old-fashioned London bus in Bookish season 1
How to watch Bookish season 1 online from anywhere
The South Park characters in a line
How to watch South Park season 27 online and from anywhere
PORTRUSH, NORTHERN IRELAND - JULY 16: Rory McIlroy of Northern Ireland looks on during a practice round prior to The 153rd Open Championship at Royal Portrush Golf Club on July 16, 2025 in Portrush, Northern Ireland. (Photo by Stuart Franklin/R&A/R&A via Getty Images)
British Open 2025 live stream: how to watch the golf online, schedule, Round 2 tee times, leaders
Kevin Vauquelin of France and Team Arkea - B&B Hotels attacks climbing the Cote d'Outreau
Watch Tour de France LIVE: Pogacar records dominant Stage 12 win, TV channels, free streams
People wave flags at the Royal Albert Hall in west London on September 7, 2013 during the last night of the Proms. US conductor Marin Alsop became the first woman to conduct the Last Night of the Proms in its 118-year history. AFP PHOTO/CARL COURT (Photo credit should read CARL COURT/AFP via Getty Images)
How to watch First Night of the Proms 2025: live stream for free online from anywhere
LATEST ARTICLES
  1. 1
    We rated the Roku Pro series the best budget OLED TV, and it's $400 off at Best Buy
  2. 2
    Netflix uses generative AI VFX in a show for the first time, as CEO says ‘the cost just wouldn’t have been feasible for a show on that budget’
  3. 3
    Foundation season 3 episode 2 appears to say goodbye to a key character, but the Apple TV + show's star isn't too sad about it: 'I found it satisfying'
  4. 4
    Microsoft extends support for Exchange, Skype business servers - here's how to keep access
  5. 5
    Antivirus vs Firewall: which is right for me?

TechRadar is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.

  • About Us
  • Contact Future's experts
  • Contact Us
  • Terms and conditions
  • Privacy policy
  • Cookies policy
  • Advertise with us
  • Web notifications
  • Accessibility Statement
  • Careers

© Future US, Inc. Full 7th Floor, 130 West 42nd Street, New York, NY 10036.

Please login or signup to comment

Please wait...