After the poisoning of the computer, basically all the files have a suffix of. Wncry, but soon the original files will disappear as if deleted.
In a short time, all the poisoned original files disappeared, leaving only the encrypted files. Even changing the suffix won't help.
In addition to paying ransom, only the latest version of the top data recovery software has the chance to retrieve these encrypted files.
Basically, you can find the latest version of the recovery software on the home page by directly searching on the Internet, open the top data recovery software, and perform the installation recovery. After the installation is completed, we need to choose the 'universal recovery mode'. Only universal recovery mode has effect!!
After that, the software will enter the scanning stage of the device, and can only be restored after all the software scanning is completed. After scanning, there are XLS, JPG, PNG and other classifications in the software. Because in the virtual machine environment, only tables and pictures are added to the editor, so only these are scanned out to continue the recovery. All the lost pictures and documents can be previewed, which means the recoverability is very high. Check what we need and click next to recover.
Finally, please note that do not save the recovered files to the poisoned computer, prepare an empty U disk, and select the U disk as the recovery storage device, so as to prevent the files from being poisoned again.
After all the restoration is completed, unplug the U disk and find a new computer to copy the files.