Remove Virus and Decrypt Files ransomware virus encrypts victims’ files and adds the .xtbl extension to them. Instead of dropping the typical for ransomware viruses ransom note asking for a specific amount in exchange for a decryption key, this one prompts its victims to send an email to to negotiate the sum of get their files back after they have been completely scrambled.

Negotiating and paying the cyber crooks is not advised if you have been attacked by this virus or any other ransomware. Instead, read the article below to see how to remove it and then try to recover some of your files back.

How Is Delivered into Your PC? is distributed via malicious executable attached in phishing emails which resemble a legitimate company, person, institution, organization, etc. to trick the victim into opening it.

The malicious executable may also be an Exploit Kit or JavaScript file masked as a legitimate .pdf ot Microsoft Office document so that many users would never recognize it as a trap.

How Does Work?

Typical to .xtbl ransomware viruses, downloads into the victims’ PC upon opening the malicious executable. Derefter, it may create malicious componets into some of the Windows folders, such as:

  • %AppData%
  • %Roaming%
  • %Local%
  • %Temp%

Derefter, ransomware will scan the PC to locate files for encryption. The files it usually encrypts are:


Once encrypted, the virus will add the .xtbl extension to them.

The ransom note will then appear on the desktop with instructions. It says that the victim needs to send an email to the given address and negotiate a sum which he has to pay to the cyber criminals in order for them to send him a decryption key.

How to Remove from Your PC

As we said before, never negotiate or pay the cyber criminals because this way you only encourage them to spread more ransomware viruses around. What’s even worse for you is that there’s never a guarantee that you’ll receive your files back even if you pay the demanded amount.
What we suggest then is to first remove virus from your system and only then to try restoring some of your files back. Full recovery of files after encryption is rarely possible so make sure you back up you data so you won’t get attacked by nasty ransomware infections again.
To remove, make sure you use a powerful anti-malware tool that will scan your system, detect the malicious files and remove them safely and completely. If you try to manually remove the virus, you may worsen the situation, especially if you have no technical background.

The free version of SpyHunter will only scan your computer to detect any possible threats. To remove them permanently from your computer, purchase its full version. Spy Hunter malware removal tool additional information / SpyHunter Uninstall Instructions

Efterlad et svar

Din email adresse vil ikke blive offentliggjort. Krævede felter er markeret *

Time limit is exhausted. Please reload the CAPTCHA.