Did you mean .XTBL instead of XBLT?Troldesh (aka Encoder.858 or Shade)
is a crypto-ransomware variant created in Russia that appends encrypted data files with an .XTBL
extension to the end of each filename using GPG Cryptography. Troldesh leaves files (ransom notes) named README1.txt, ...README10.txt and downloads additional malicious files.
Note: When first reported, it was believed this ransomware was an earlier variant of the original CTB Locker which changed the extension of encrypted files and renamed them with a .CTBL, or .CTB2 extension but that was not the case.
I am not aware of any fix tool or way to decrypt encrypted data without paying the ransom. As with most ransomware infections...the best solution for dealing with encrypted data is to restore from backups
. If that is not a viable option and if there is no fix tool, the only other alternative is to save your data as is and wait for a possible breakthrough
...meaning, what seems like an impossibility at the moment (decryption of your data), there is always hope someday there may be a potential solution so save the encrypted data and wait until that time.