ESET AES-NI decryptor

With ransomware on the rise, it is important that you take prevention measures to protect your computer. But if despite your efforts the PC still got infected, then a dedicated decryption tool might be the answer to unlocking your files without having to pay the ransom.

ESET AES-NI decryptor targets files that have been infected by the XData or the AES-NI ransomware. While it does not replace a full-featured security solution to actively protect the computer, this application is more like a post-infection solution for restoring access to your files.

Known as Win32/Filecoder.AESNI, this ransomware trojan encrypts various files on the local drive, asking for a ransom in bitcoins in exchange for the decryption key. One of its variants is called XData (detected as Win32/Filecoder.NLN), a ransomware that threatened to outbreak just when the Wannacry wave got lower in size.

AESNI and its variants target different file types and append a special extension to the file name, such as aes256, aes_ni_0-DAY, aes_ni or lock, making the files inaccessible unless a payment in Bitcoins is made. If this short description seems similar to you, then you should try out the ESET AES-NI decryptor.

Relying on a security master key that was previously released, the ESET AES-NI decryptor promises to detect files that are encrypted by the aforementioned ransomware and restore access to their content.

The application must be launched from a console with administrative privileges. It starts searching for AES-NI specific file extensions in the location you passed as a parameter. Once it finds the key files, it looks for the infected files and tries to decrypt them, all at once.

The AES-NI ransomware prevents you from accessing your files and asks for ransom in exchange for the unlocking key. Before deciding what to do next, ESET's AES-NI decryptor is worth a try if you want to recover your files.