How to recover files encrypted by Aesir ransomware?

by Ugnius Kiguolis - -


Issue: How to recover files encrypted by Aesir ransomware?

Today I turned my computer and found all my valuable documents encrypted! I worked on the project for two months! What is more, the message popped up on the screen saying that RSA-2048 ransomware encoded my files. I even consider paying the ransom…anyway, can you propose a solution? Or is it dead-end situation?…

Solved Answer

Recover now! Recover now!
Reimage is recommended to recover required system components. To get a detailed report and in-depth analysis about your system, use the free scanner. To recover needed system components, please, purchase the licensed version of Reimage Reimage recovery tool.


One of the latest versions of notorious ransomware called Locky appends the files with .aesir file extension. It utilizes RSA-2048 and AES-256 encryption methods for the encoding process. Since the latter techniques are based on a public and private key combination, the decryption without the respective key remains a complicated matter. However, while IT specialist are working on the decryption tools, security applications devised alternative methods for decrypting the files. Do not consider transmitting the money as the chances of receiving the data are very low. As you may know, Locky virus has made hundreds of billions of profit by infecting corporations, hospitals, and corporate users. That is why do not foster any hopes and remove Aesir ransomware with a security tool. You may use Reimage for that purpose. Below find some of the suggestions to recover the files.

Option 1. Recover the data with Data Recovery Pro

This application helps to restore damaged files after a system crash. Taking into account the increased ransomware activity, the authors of the app updated the utility, and now it is capable of restoring some of your essential files.

  1. Download Data Recovery Pro and run the setup file.
  2. Follow the guide.
  3. Scan the system with it. Later on, the program detects corrupted files.
  4. Choose the affected files and click Recover button.

Option 2. Opting for Windows Previous Versions feature

If System Restore function is enabled, follow the steps to access the last automatically saved copy of your file. However, this solution requires more time.

1. Find the corrupted file right-click on it.
2. Select Properties and navigate to Previous Versions tab.
3. Find the available copies of the file in Folder versions. Select the last version and click Restore.

Option 3. Does ShadowExplorer help decrypt the files?

The essence of this utility lies in employing shadow volume copies which are automatically stored on the device. The original version of Locky is known for deleting these copies but the successive versions might deviate from this pattern. All in all, give this app a try. Note. All recovery actions should be initiated only when the malware removal utility completely eliminates the virus.

  1. Download and run the program.
  2. Launch it and select the folder you want to retrieve the files from.
  3. Click on it and choose Export.

Recover files and other system components automatically

To recover your files and other system components, you can use free guides by experts. However, if you feel that you are not experienced enough to implement the whole recovery process yourself, we recommend using recovery solutions listed below. We have tested each of these programs and their effectiveness for you, so all you need to do is to let these tools do all the work.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided software you agree to our privacy policy and agreement of use.
do it now!
recovery software Happiness
do it now!
recovery software Happiness
Compatible with Microsoft Windows Compatible with OS X
Do you have any trouble?
If you are having problems related to Reimage, you can reach our tech experts to ask them for help. The more details you provide, the better solution they will provide you.
Reimage - a patented specialized Windows repair program. It will diagnose your damaged PC. It will scan all System Files, DLLs and Registry Keys that have been damaged by security threats.Reimage - a patented specialized Mac OS X repair program. It will diagnose your damaged computer. It will scan all System Files and Registry Keys that have been damaged by security threats.
This patented repair process uses a database of 25 million components that can replace any damaged or missing file on user's computer.
To repair damaged system, you have to purchase the licensed version of Reimage malware removal tool.

About the author

Ugnius Kiguolis
Ugnius Kiguolis - The problem solver

Ugnius Kiguolis is the founder and editor-in-chief of UGetFix. He is a professional security specialist and malware analyst who has been working in IT industry for over 20 years.

Contact Ugnius Kiguolis
About the company Esolutions

Read in other languages

What you can add more about the problem: "How to recover files encrypted by Aesir ransomware?"