WannaDie Ransomware : Verified Removal Guidelines From Infected Windows

WannaDie Ransomware : Technical Info


WannaDie Ransomware





File extension


Ransom demand

$100 in Bitcoins


WannaDie Ransomware Can Make Your Valuable Files Useless

Malicious macros, Spam email attachments, infected links etc.

Infected systems

Windows OS


  • GenericR-KYK!0E663978F2DF
  • MSIL/Filecoder.KQ
  • Ransom.HiddenTear!g1
  • TROJ_GEN.R045C0OKJ17
  • Trojan ( 0051c5e91 )
  • W32.Troj.Ransom.Filecoder!c
  • W32/Trojan.FCCP-0299

WannaDie Ransomware Can Make Your Valuable Files Useless

WannaDie Ransomware is a data encrypting ransom virus that invade your system when you open a macro enabled documents. Macros are legitimate scripts used to automate many of repetitive works on Windows but Windows interprets them as a commands with administrative privileges, and due to this reason many of the malware developers uses them as a source carrier of infection to your computers. The malware is known to deliver their infection under the pretense that it seems an updated version of WannaCry (WannaCrypt0r) for the Russian cyber world. This ransomware is reported attack on systems located in Russia predominantly but it does not mean that it not spreads to neighboring countries. The malware firstly spotted in 17th November 2017 and it clearly seems that it is a modified version of the very well infamous Hidden Tear ransomware platform. The WannaDie Ransomware is seen to run as a "Wana_Decrypt0r.exe" and "wndie.exe" on the infected computers.

remove WannaDie Ransomware

This process "wndie.exe" is associated with the encryption process which started by the ransom threat. The ransom virus is observed to encrypt data and then after following successful encryption it attaches a ".wndie" file extension to the affected data. The ransom message is presented via a simple text document file called "ReadMe.txt" which is placed on affected computers desktop. The message is in Russian but translated in English, you can read it as

remove WannaDie Ransomware

The program window is modified by "Wana_Decrypt0r.exe" and convince the users to pay the ransom amount within 24 hours. Affected victims may lead to buy the decryption key or software that is by paying hundred of rubles in Bitcoins and money transferred to the wallet address of "1Dowv8DTWhRk6xQmuWrEDipgCc83VTKbYT". Mostly this WannaDie Ransomware may comes inside of the system by following various infecting ways. Some of the most common ways to infection delivery via malicious macros which looks like legitimate scripts, spam emails attachments which might carries an infectious content which might be the virus when download on system gets activated, clicking on infected links and so on.

If you want to decrypt your files but you know that it is impossible without removal of ransomware So you should try to remove WannaDie Ransomware as soon as possible by using a trusted anti-malware and use kept backup to restore files.  

Free Scan your Windows PC to detect WannaDie Ransomware


How To Remove WannaDie Ransomware From Your PC

Start Windows in Safe Mode with Networking.

  • Click on Restart button to restart your computer
  • Press and hold down the F8 key during the restart process.

Safe Mode 1

  • From the boot menu, select Safe Mode with Networking using the arrow keys.

Safe Mode 2

  • Now your computer will get started in Safe Mode with Networking.

End WannaDie Ransomware Related Process From Task Manager

  • Press Ctrl+Alt+Del together on your keyboard.

TM 1

  • Task manager Windows will get opened on your computer screen.
  • Go to Precess tab, find the WannaDie Ransomware related Process.


  • Now click on on End Process button to close that task.

Uninstall WannaDie Ransomware From Windows 7 Control Panel

  • Visit the Start menu to open the Control Panel.

Win 7 CP 1

  • Select Uninstall a Program option from Program category.

Win 7 CP 2

  • Choose and remove all WannaDie Ransomware related items from list.

Win 7 CP 3

Uninstall WannaDie Ransomware From Windows 8 Control Panel

  • On right edge of screen, Click on Search button and type “Control Panel”.

Win 8 CP 1

  • Now choose the Uninstall a Program option from Programs category.

Win 8 CP 2

  • Find and delete WannaDie Ransomware related items from the programs list.

Win 8 CP 3

Delete WannaDie Ransomware From Windows 10 Control Panel

  • Click on Start button and search Control Panel from Search Box.

Win 10 CP 1-2

  • Got to Programs and select the Uninstall a Program option.

Win 10 CP 2

  • Select and Remove all WannaDie Ransomware related programs.

Win 10 CP 2

Remove WannaDie Ransomware Related Registry Entries

  • Press Windows+R buttons together to open Run Box

Registry 1

  • Type “regedit” and click OK button.


  • Select and remove all WannaDie Ransomware related entries.

Remove WannaDie Ransomware Infection From msconfig

  • Open Run Box by pressing Windows+R buttons together.


  • Now type “msconfig” in the Run Box and press Enter.

Misconfig 1

  • Open Startup tab and uncheck all entries from unknown manufacturer.

Misconfig 3

Hope the above process has helped you in removing the WannaDie Ransomware virus completely from your computer. If you still have this nasty ransomware left in your PC then you should opt for a malware removal tool. It is the most easy way to remove this harmful computer virus from your computer. Download the Free WannaDie Ransomware Scanner on your system and scan your computer. It can easily find and remove this pesky ransomware threat from your PC.

If you have any questions regarding the removal of this virus then you can ask your question from your PC security experts. They will feel happy to solve your problem.

Scan Now