Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Any one knows about extension XBLT?


  • Please log in to reply
3 replies to this topic

#1 Juauga

Juauga

  • Members
  • 6 posts
  • OFFLINE
  •  

Posted 21 February 2016 - 10:33 AM

Any one knows about extension XBLT?

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,281 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:41 AM

Posted 21 February 2016 - 11:54 AM

Did you mean .XTBL instead of XBLT?

Troldesh (aka Encoder.858 or Shade) is a crypto-ransomware variant created in Russia that appends encrypted data files with an .XTBL or .YTBL extension to the end of each filename using GPG Cryptography. Troldesh leaves files (ransom notes) named README1.txt, ...README10.txt and downloads additional malicious files.Note: When first reported, it was believed this ransomware was an earlier variant of the original CTB Locker which changed the extension of encrypted files and renamed them with a .CTBL, or .CTB2 extension but that was not the case.

I am not aware of any fix tool or way to decrypt encrypted data without paying the ransom. As with most ransomware infections...the best solution for dealing with encrypted data is to restore from backups. If that is not a viable option and if there is no fix tool, the only other alternative is to save your data as is and wait for a possible breakthrough...meaning, what seems like an impossibility at the moment (decryption of your data), there is always hope someday there may be a potential solution so save the encrypted data and wait until that time.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 Juauga

Juauga
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  

Posted 21 February 2016 - 03:15 PM

XTBL is the extension, thak you quiteman7



#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,281 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:41 AM

Posted 21 February 2016 - 03:18 PM

You're welcome and sorry we could help more.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users