Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

XData Ransomware Help & Support Topic .~xdata~ & HOW_CAN_I_DECRYPT_MY_FILES.txt


  • Please log in to reply
4 replies to this topic

#1 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,271 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:07:51 AM

Posted 20 May 2017 - 01:11 PM

This is the help and support topic for the XData ransomware. If you are infected and need support or have questions, feel free to post here.

XData is a new ransomware that has been heavily targeting the Ukraine over the past few days. More about this can be learned here:

XData Ransomware on a Rampage in Ukraine

When infected, a user's files will be encrypted and have the .~xdata~ extension added to the file name. It will also create ransom notes named HOW_CAN_I_DECRYPT_MY_FILES.txt.

Unfortunately, this ransomware cannot be decrypted for free at this time.

XData-ransom-note.jpg



BC AdBot (Login to Remove)

 


m

#2 guest0987654321

guest0987654321

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:01:51 PM

Posted 30 May 2017 - 11:31 AM

HERE IS PRIVATE:

00 08 00 00 A8 FD 62 08 8C E3 41 9D 55 29 62 01 02 B6 AF A1 3D BE 3A C2 C8 7A 6F D3 37 31 C1 51

CC ED A5 2E 7D A1 9B 53 01 6C A8 71 F2 E4 BD 51 4E 8B 7E D0 EA 5C 83 2C 36 17 C0 C6 39 3B FE 54
26 1D E2 42 6E 45 7D CE 1A 8C 1F C0 38 81 6D E8 7C C5 43 EE 28 D8 41 6F 6B 3E 0F 2C 49 05 3B 0B
74 46 60 93 FD 1D D6 DB F5 21 57 49 3E D5 EB 37 64 DD 2C 2A 0A D8 13 9E B1 38 3D D2 2A 56 92 0E
76 6D A2 AE 44 57 F7 9C D8 25 5E 62 9B FC FF F3 7F F9 7E A0 DE 57 F7 33 7D 97 7B A1 41 A8 EC AC
E0 9F D0 06 3D 3D DA F9 64 9B 21 DB F3 D2 94 C8 B9 0C DE A2 3C DE E3 18 A1 46 9B FE AE B0 94 1D
CC 40 12 4E 5A CE B1 74 BA 4A F2 D2 C7 97 5C 6C B6 BB 6B D1 32 8F F1 63 44 8F AD 58 0D 53 80 B7
54 A6 C7 05 CD D7 60 FE AB 98 C8 19 17 94 3B 31 14 AF 84 F4 88 B6 68 8D 6B FC FD 84 71 EC F2 36
39 50 F9 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 01 00 01 22 D7 5B 06 F8 45 42 99 F5 9C FA 9F CA B7 6F AE 86 D4 59 B9 1F 2C 5F 31 E5 07 55 1C
50 6C 0E CA 6F 0C 8A C1 AA 61 84 B9 39 A2 FF 85 6B F4 46 C9 3C 08 A6 E2 CE A4 47 12 97 6A 4F 1D
7A 5E 5E EF E3 5C 60 7B C5 ED 6D FE 6B A8 03 C9 13 30 78 B8 F9 A2 DC 9A E4 39 7F 57 5A 16 C1 FD
B2 93 70 06 13 01 BB F2 CD AF 7A 17 97 E4 F3 02 10 C1 A9 01 62 0A FA C0 95 39 4B 45 B1 84 F7 C8
13 92 B7 1F 6F CC 9B 2C 9D 03 EE 26 24 7A 5E 19 68 8E C6 D6 6C 98 6E 55 EC 66 26 4A 6C FC 16 82
A0 00 61 F5 41 51 65 C2 EF 6E ED 33 7F A2 36 C9 BB A7 16 BB 38 1C 1D 3A 65 A9 A8 DD D0 16 49 C1
34 3E 15 AD 07 C0 33 05 C2 BA 8B 5B A5 75 BF 29 2C 17 95 DD C2 4D 32 0D F5 E9 5D EC D2 7D 77 61
2F 82 04 3B 89 2A B8 E7 AB D3 90 7D 99 67 CC 16 32 3C CC 5F 2C BF B6 9E 16 D3 9F 74 4A 1E EC C3
FA E2 B8 81 AE 57 10 04 9A 77 EE 5F BA AF D8 AE 44 C7 BF D0 7D 82 4A 11 8B 22 40 C9 96 96 11 64
46 A2 07 92 20 57 97 D0 41 C5 36 59 3D 34 C7 EE F7 26 99 76 A1 85 02 0B 8F A1 05 C6 F4 C1 19 44
38 C3 EC 0D 37 B4 BE B4 D1 5B 59 B2 BA AB 98 6F 7E AD 4C 16 37 6E 25 1F 8C 7C 2D 1D 77 A7 E8 54
95 3C 66 B3 9D 68 54 86 D8 6A 40 75 02 BF B2 C2 0C A4 65 01 D4 49 7B 47 88 E7 9E A9 F0 C8 42 35
5C FD 72 DD F8 24 C5 2A 59 8E 4E 52 DB D5 D1 DD 95 5F D5 73 66 C4 7E 54 37 58 3A AE 13 88 68 6B
2F FC D6 23 B8 21 B1 E0 22 0A E1 9C D7 DA 75 2B 41 5A 7A 7A 98 A2 AE C2 23 9B 4E D6 B4 3F ED 98
E4 E4 16 E3 0F C0 C5 EC 83 87 CF 45 04 8E EA F6 7D 01 34 17 48 87 1D 72 19 8C 3A 8A 9A EE 8D A6
5E 59 C8 CC 67 2E E5 51 63 6A 03 C0 FE C0 1E 5F 9A 67 00 7F 7D BA EB CC 87 5A 10 57 AB AC 5C E3
76 7F 1C BD 6D 78 0F 7F C4 7A 6F FC 3E 1D F2 81 A2 80 86 69 E4 95 2D EB 0C 21 2A EB 29 99 FB 3B
AA BA 4C E4 AD 58 32 E4 3A 98 19 83 39 52 6E 04 17 BE 6D F8 36 7D 6D 06 53 5E 79 61 2F 08 1C D4
60 8C 6D 28 F3 84 93 86 B8 3A 92 FD 0E 07 77 44 F3 16 DF C2 C7 75 6A EB FF 6B 6D 6C A6 58 91 22
A3 3E 75 02 6D 61 38 4A 1F 93 BF FB 79 09 63 B6 42 F7 EA D0 96 3A B9 A4 F6 4A F1 AE A5 99 29 31
96 BD 32 25 76 82 01 13 C7 AF 79 E2 82 90 EC 68 99 C5 2A 08 B2 24 D7 7C 5A EE 2D 20 23 BD FA B8
6E 33 9F 05 72 13 CD 82 90 5F 87 FE 42 EC 57 16 F0 60 48 AC 32 27 47 B4 FA 12 5B 25 98 F2 0B 04
01 14 99 85 99 69 64 5D 1F 38 06 1A 1D 22 30 3E C5 D6 84 4D 36 5B 29 09 EB FF 97 99 C8 82 73 6D
E8 13 93 1D 63 8D F7 00 D6 AC B3 DC 41 0D F9 B3 88 E6 F6 4A EC FE 0F 4D 1F BB 38 A0 D6 21 3C 3F
79 C1 1D 35 6F 60 38 AF A6 14 F5 3F 33 33 B6 B3 7D B0 F7 66 81 DF C0 F9 DA 31 AD FC 16 8B 40 1F
15 71 86 84 2A 3E BC D6 31 79 10 E7 44 77 B7 3A F9 1A A8 5F B1 41 BF 2C 25 F5 E5 37 E1 41 B0 C8
8E 30 D3 00 B9 5B C2 72 FB 90 E4 EC 59 A5 AA 18 C8 1C 1A 07 4E 0C 0C F7 D5 B9 68 DB 70 D5 A1 A7
B4 C8 AB E4 0A 76 F6 22 74 91 1A 8A 13 30 C6 06 0A 90 30 70 C6 75 1A 03 44 31 BC A6 0D 89 85 86
81 0B 3B 80


#3 AES__NI

AES__NI

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:07:51 AM

Posted 30 May 2017 - 01:05 PM

uebki



#4 Grinler

Grinler

    Lawrence Abrams

  • Topic Starter

  • Admin
  • 43,271 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:07:51 AM

Posted 30 May 2017 - 01:11 PM

Key is legit. Decryptor released soon

#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 49,940 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:51 AM

Posted 30 May 2017 - 08:07 PM

Latest BC new article: XData Ransomware Master Decryption Keys Released. Kaspersky Releases Decryptor
.
.
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Microsoft MVP Reconnect 2016
Windows Insider MVP 2017
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users