- This topic is empty.
- Topic
My client’s computer was hit with this .XTBL ransom virus today. After looking at the PC, I can see that only one drive is affected, files on the other drive attached to computer are intact. Good thing, he has a backup a week before .XTBL virus hits the computer.
Bitcoinrush@aol..com.xtbl is the specific ransomware we found. The format is (original_file_name).(original_extension).id-97501HUIS.bitcoinrush@aol.comxtbl. So the file image1.jpg becomes image1.jpg.bitcoinrush@aol.comxtbl.
When we send emails to provided address, the hacker want us to pay 2.53 Bitcoins. At the current exchange rate, it is around US $1,650. Well, my client does not have that money to pay for the encryption key. In fact, even if we have the budget we will still push for free decrypter of all .xtbl encrypted files. As mentioned, only week of files are infected. Mostly media and images are encrypted, which is not so important but still has value.
Please tell us where to download .xtbl decryption tool. Some sites we have visited are promoting file decryptor tool, however, none of them works realistically.
- Replies
Hey, I’ve decrypted my vgclass.aol.com.xtbl files using Avast’s FREE CrySiS descryption tool – here’s a link https://www.avast.com/ransomware-decryption-tools
please send me Vegclass@aol.com.xtbl decryptor.. thanks
arquivos renomeados com final id-DE9279D9.{x0313sss15xss@aol.com}.adobe sendo criptografados pelo executavel 27 – copy.exe
id-DE9279D9.{alex.vlasov@aol.com}.adobe
id-DE9279D9.{alex.vlasov@aol.com}.xtbl