The ransomware decryption tool doesn't require installation, so you can double-click the downloaded. The encrypted files (such as documents, photos, movies) may be found in C:, C:\ProgramData or the desktop.
It also creates a plain text document with instructions on how to pay the ransom (HOW_CAN_I_DECRYPT_MY_FILES.txt). This means that it doesn't target only your PC but also others in your network. It's a serious threat that uses the Eternal Blue exploit to infect other machines, just like WannaCry. XData represents a ransomware variant that evolved from AES_NI. Unlock files encrypted with the XData ransomware If you know or suspect your computer to be infected with the XData ransomware, you can turn to Avast Decryption Tool for XData Ransomware. Getting hit by ransomware typically leads to two scenarios: paying the ransom with real money or getting equipped with the necessary tools to decrypt your locked files for free.