How to recover
Files Encrypted by XDATA
from Windows

Is XData decryptable and what decryption tool should I use to recover my files?

XData decryptor is a tool that people whose files have been encrypted and appended with .~xdata~ extensions have all been waiting for. And their wait was not in vain. Three well-known security vendors Kaspersky, Eset and Avast have come up with XData decryptors which are now helping hundreds of users to recover their files without having to pay hefty ransoms to the cybercriminals. While these tools are real lifesavers, not all people are confident when it comes to using them. Ransomware victims are afraid they may accidentally make more damage to the files by trying to recover them than the parasite did while rendering them unreadable. In other words, the users are afraid of losing their personal data indefinitely. This article is meant for these people or anyone who wants to learn how to outsmart XData ransomware and get back their files using the free decrypters. But you can’t start the fight with an enemy without knowing what it’s made of. Thus, let's briefly look at the XData and learn why it is called one of the nastiest cyber infections terrorising the cyber community these days.

Xdata is a file-encrypting, ransom-demanding virus which has showed up online shortly after the infamous WannaCry ransomware has swept through the cyber world causing panic and distress to home users, corporations and businesses. Xdata creators have based the virus mechanics on this parasite, hoping to achieve similar success. And on the most part, they have reached their goal. Xdata started spreading even more rapidly than WCry, though the centre of the attacks was Ukraine. 93 % of all ransomware detections were originating from this particular country. Users whose computers have were attacked found their files inaccessible and marked with .~xdata~ extensions. A document called HOW_CAN_I_DECRYPT_MY_FILES.txt has also been added to the computer featuring the data recovery instructions. Each victims was demanded as different amount of ransom which may have fluctuated from 0.5 to 2 Bitcoins. Some users have paid and never seen their money again as the scammers have simply vanished without issuing the data decryption key. Luckily, you don’t have to risk your financial status anymore as you can now recover your files by applying free decryption tools. Click on the links below to download these utilities directly:

Download Kaspersky’s RakhniDecryptor here.

Download Avast’s Xdata decryption here.

Download joint XData and AES-NI decryptor from Emsisoft here. 

All the decryptors operate automatically, so what you have to do is simply download the right program from the official website and launch it on your computer. Please note that in case of Kaspersky’s tool, you will need to extract it before being able to use it.