Remove Xdqd Ransomware

The Xdqd Ransomware is a file-encryption Trojan meant to prevent its victims from accessing their data. It does this by executing a merciless file-encryption attack, which targets documents, archives, media, and many other files. Whenever it encrypts a file, the Xdqd Ransomware will add the extension '.[<VICTIM ID>].[xdatarecovery@msgsafe.io.' Unfortunately, recovering the locked files is very difficult because there is no decryption tool that can reliably restore the locked files. The best option is to restore from a backup or, alternatively, to use popular data recovery software and methods. However, keep in mind that the latter two options might not yield satisfying results.

The authors of the Xdqd Ransomware have based on their file-locker on the Makop project. They drop a ransom note, which is stored in the document 'readme-warning.txt.' it advises the victim to contact xdatarecovery@msgsafe.io and xdatarecovery@mail.com, and assures them that their data will be restored if they agree to pay a ransom fee.

Just like other ransomware creators, the ones behind the Xdqd project also offer proof that their decryption service works. They ask the victim to send 1-2 small files by using the aforementioned addresses. While you should use this offer, you should not accept to pay any money – doing this may get you scammed.

What is the best thing to do if the Xdqd Ransomware has locked your files? Since paying is not an option, your priority is to ensure the threat's full removal by running an up-to-date antivirus scanner. Once you do this, you can proceed to run 3rd-party data recovery tools, which can assist you with the restoration of your data.