How to Recover Files Encrypted by Ransomware

Encrypted files can be a nightmare. Here’s a simple guide to help you recover your files if they have been locked by ransomware like CryptoLocker.

Restore Files from Backup

First, identify the encrypted files on your computer. Once you know which files are affected, delete them. Then, copy and paste the backup files from your external backup drive to your computer.

Recover a Deleted File or Folder in Windows

Accidentally deleted files can be recovered. Follow these steps based on your operating system:

• Windows 10:
  1. Open the folder where the file was located.
  2. Right-click inside the folder.
  3. Select Restore previous versions.
  4. Choose the version you want.
  5. Click Restore.
• Windows 11:
  1. Go to the folder where the file or folder is located.
  2. Right-click the file or folder.
  3. Select Show more options.
  4. Click Restore previous versions.
  5. Select the desired version.
  6. Hit Restore.

Restore a Previous Version of a File or Folder

If you need to go back to an earlier version of a file or folder, here's how:

• Windows 10:
  1. Right-click the file or folder.
  2. Select Properties.
  3. Go to the Previous Versions tab.
  4. Pick the version you want.
  5. Click Restore.
• Windows 11:
  1. Right-click the file.
  2. Choose Show more options.
  3. Click Properties.
  4. Go to Previous Versions.
  5. Select your version.
  6. Press Restore.

Perform a System Restore

If the above methods don’t work, you might need to restore your entire system to a previous state:

1. Type Create a restore point in the search bar.
2. Open the system properties.
3. Click System Restore.
4. Follow the prompts to choose a restore point before the infection occurred.
5. Click Next to start the process.