WannaLocker Ransomware (Android) – How to Remove (+ Unlock Phone)

WannaLocker Ransomware (Android) – How to Remove (Unlock Phone)

What is WannaLocker? How does WannaLocker infect phones? How to remove WannaLocker from your Android and unlock It.

WannaLocker is the latest Android ransomware virus that aims to copycat the WannaCry virus, which caused a havoc couple of years back.The virus aims to set various different types of messages, containing the extortionist note and it’s main goal is to completely lock you out of your Android Device until you pay the hackers ransom. This ransom is in the form of BitCoins and the virus does not go away unless you pay. Not only this, bt WannaLocker may also steal your banking information by showing fake banking login pages. Only one more reason why you should read this article to learn how to get rid of this nasty piece of malware.

Threat Summary

TypeRansomware, Cryptovirus
Short DescriptionRansomware on Android devices. Aims to add a lockscreen on your Phone without any ways to unlock it.
SymptomsInitially, WannaLocker may show fake banking login pages to steal your banking information via phishing, but eventually may lock you out of your phone, showing it’s ransom message.
Distribution MethodVia a fake security app.
Detection Tool See If Your System Has Been Affected by WannaLocker


Malware Removal Tool

User ExperienceJoin Our Forum to Discuss WannaLocker.
Data Recovery ToolWindows Data Recovery by Stellar Phoenix Notice! This product scans your drive sectors to recover lost files and it may not recover 100% of the encrypted files, but only few of them, depending on the situation and whether or not you have reformatted your drive.

WannaLocker for Android – How Did I Get It and What Does It Do?

The main method via which WannaLocker may end up on your computer is as a result of unsafe web browsing. If you have visitied an unsafe page, it may add a fake Google Play Protect application on your Android smartphone. The outcome of this is that WannaLocker may begin performing it’s virus activities in the background and you may not even be able to notice.

Whatever the case may be, once the WannaLocker virus infects your Android phone, it’s first activities are the following:

  • It harvests your SMS logs.
  • It steals your call logs.
  • It obtains your saved phone numbers.
  • It obtains any financial details or credit card information you may have currently added on your app.
  • It may attack banking apps, to obtain financial data from them.

When certain time passes by, the WannaLocker may then set your phone LockScreen to the following:

The end goal of this virus is to pay, but be advised that you should not trust these hackers under any circumstances since they may have already compromised your financial credentials.

Remove WannaLocker from Your Android

WannaLocker can be removed from Android if you follow the instructions underneath. Make sure to select the device you have and use the steps to factory erase it. But before doing that, we strongly advise that you try and BACKUP your files. One way of doing this is if you try connecting your phone to your computer and by trying to get your files out of there.

1. Back up the data on your device

Back up the data on your phone

CAUTION! Before attempting any removals and drive formatting on your device, you should know that it is essential to save all your important contacts and files from your phone. There are several methods to backup your files:

Method I: Using online backup software or a memory card if the device supports it.

Method II: Connecting to another device and copying the data directly.

This is a bit risky option since the device may have malware on it. This is why, first you need to enter the device’s Safe Mode:

For RAZR Droid Devices:

1.Switch off the smartphone and remove the battery for a few seconds then plug it back in.

2.Switch the phone on.

3.You should see a Motorola Dual Core screen appearing. You should press and hold the Volume up, and Volume Down keys on the side of the smartphone. Hold them until the lock screen shows up with ‘Safe Mode’ written in the lower corner.

For HTC Devices:

1.Switch off the smartphone and remove the battery for a few seconds then plug it back in.

2.Turn on your phone while simultaneously holding down the Menu Button. When it starts, keep pressing the Menu Button until you see ‘Safe Mode’ menu appearing in the lower corner.

For Nexus devices:

1.Switch off the smartphone and remove the battery for a few seconds then plug it back in.
2.Turn on the phone.
3.When the welcome Logo Screen shows up, hold the trackball while pressing it until a lock screen shows up, or you see ‘Safe Mode’ written in the bottom corner.

For Other Motorola Devices:

1.Switch off the smartphone and remove the battery for a few seconds then plug it back in.
2.Hold down the Menu Button after you press it while turning on the phone. When it boots, hold the button down upon seeing the lock screen or feeling the phone vibrate.

For Moto G Devices:
1.Press the Power Button and hold it on until the list with options pop-up.
2.Hold the Power off button and wait for a ‘Reboot to Safe Mode’ option to appear.
3.Tap it and let the phone reset.

For Samsung Galaxy Devices:

1.While the device is on, hold down the Power Button and wait for the Options List.
2.Wait for a ‘Restart to Safe Mode’ option to appear.
3.Choose this setting. The device will restart.

For Apple Devices:

1. While your device is locked, hold down the Power Button and the Home Button until you see a white Apple logo.
2. Once you see the logo, let go from those buttons and start holding the Volume Up button. (Give it a little time to boot up)
3. Now the phone should boot in Safe Mode without any third-parties running.

And now it is time to proceed by doing the actual backup:


1. Connect your device via USB to a computer and select Use as a Media Device. You may also see use as file transfer option.
2. Go to your phone from My Computer and copy all the files you need.
3. If the phone has an option to install its drivers onto your computer, select it and install them since this will simplify the process of copying your contact list on your computer.

2. Hard-reset your device and remove WannaLocker

Hard-Reset Your Smartphone

For Android Devices:

After you have backed up your files, you should perform a clean wipe-out of your phone. This can happen either via one of the options in Safe Mode or by entering your device’s Recovery Mode. Several methods exist in order to enter Recovery Mode of your device:


For Nexus Devices: – Hold the Volume Down + Volume Up + Power button until a Recovery menu appears. After that, you should select the Wipe Data/Factory reset option. Nexus 4 may work with Volume Up + Power + Volume Down.

For Samsung Devices: – Hold the Volume Up + Power Button + Home Button until a Recovery menu appears. After that, you should select the Wipe Data/Factory reset option.

For Motorola Droid X Devices: Hold the Home Button + Power Button until a Recovery menu appears. After that, you should select the Wipe Data/Factory reset setting.

For other devices with camera buttons on them: Hold the Volume Up + Camera Button until a Recovery Menu appears. After this, you should choose the Wipe Data/Factory reset option.

Also in case you have backed up your device in a Google Account, you will be able to restore your data after a complete wipe-out by just logging into your Google Account with you email and password.


Ventsislav Krastev

Ventsislav has been covering the latest malware, software and newest tech developments at SensorsTechForum for 3 years now. He started out as a network administrator. Having graduated Marketing as well, Ventsislav also has passion for discovery of new shifts and innovations in cybersecurity that become game changers. After studying Value Chain Management and then Network Administration, he found his passion within cybersecrurity and is a strong believer in basic education of every user towards online safety.

More Posts - Website

Follow Me:

Leave a Comment

Your email address will not be published. Required fields are marked *

Time limit is exhausted. Please reload CAPTCHA.

Share on Facebook Share
Share on Twitter Tweet
Share on Google Plus Share
Share on Linkedin Share
Share on Digg Share
Share on Reddit Share
Share on Stumbleupon Share