Print

[warbeast]

QUOTE(dcemuser @ Nov 21 2009, 07:09 AM)

No. The only information this tool will give is if your Xbox 360 has been banned and the Xbox 360's NAND has been written to. It's likely when it writes to the NAND to cause HDD corruption it also changes the X-value. In short, only really useful for checking Xboxes that the owners may have lied to you about.

the only problem is if you repair the nand after a ban then the x code will go back and xval will report it as clean even thou its banned then you wont find out untill it reconnects to live and fails changing the x code back to banned

[Haygar]

I don't get what all the confusion is all about. It's a great tool for anyone looking at buying a used console.
It will show you what the consoles status is at the moment. It doesn't guarantee that you have not been flagged by MS and when you next go on live, Bam, you may be stung.
Also, it doesn't mean that you haven't got nasty data waiting in your console to be uploaded to MS next time you connect. Anyone who thinks MS would have that viewable in the dashboard for all to see would be pretty naive.

[Derfuhrer]

This tool is what it is...to check the NAND status. Why cant you all take some time to read before you post the first thing that you think of....geez.

Thank you very much for this Redline and Ramzinho  

[smashhh]

QUOTE(Syn201 @ Nov 21 2009, 02:23 PM)

thanks it works as stated ,i think anyone who sticks there data in the ms repair page with modded console is only helping ms ban you 5 minutes after i put mine in after a full year off using modded box i get ban
it probably would of happened anyways and i would of taken it offline had i known about the silly profile corruption
@phimeta kasperky says everything is infected with Trojan.Win32.Agent2.clyi its a false positive
it will do the same with keygens ,hack tools ect

this is definitely useful for preowned xbox360s

I think that is m$ spy tool!!
I read every posts at many sites, when you use this "tool" you will be ban immediately!!
My McAfee says that is trojan...

[HotKnife420]

 This app should be ported to phones, so that people could have Gamestop (or whatever store they're at) hook the system up to the TV, and check the values quickly.

[sabbath_dude]

Very useful little app, works perfectly.

QUOTE(HotKnife420 @ Nov 22 2009, 04:44 PM)

This app should be ported to phones, so that people could have Gamestop (or whatever store they're at) hook the system up to the TV, and check the values quickly.

Nice idea.

[largie]

The tool works 100%

I knew both of my xbox was banned (playing the same games on them, different location) but I only use one Xbox profile. So I checked the box before recovering the profile:

Console serial: 512387274105
Encrypted X Value: 5024-EFE0-B528-301C
Decrypted X Value: 0000000000000000
Result: Secdata is Clean!

When I started the Recover profile stuff it said that there was a problem connecting to Xbox live and that a network test should be done, then it said the box was banned.

The result
Console serial: 512387274105
Encrypted X Value: BD82-CF6A-06F8-02CF
Decrypted X Value: 0000000000000400
Result: Console Banned

The tool works perfectly... You can now congratulate M$ with me getting Xbox #3 in the house, the MW2 edition thingy

Happy hacking...

[LordX]

It have a virus ? any comments ?
File Xbox_Image_Browser.exe received on 2010.08.07 17:32:59 (UTC)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED

Result: 26/42 (61.91%)
Loading server information...
Your file is queued in position: 1.
Estimated start time is between 46 and 66 seconds.
Do not close the window until scan is complete.
The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
If you are waiting for more than five minutes you have to resend your file.
Your file is being scanned by VirusTotal in this moment,
results will be shown as they're generated.
 Compact Print results  Your file has expired or does not exists.
Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time.
You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.  Email:  
 

Antivirus Version Last Update Result
AhnLab-V3 2010.08.07.00 2010.08.06 Downloader/Win32.Dloade
AntiVir 8.2.4.34 2010.08.06 -
Antiy-AVL 2.0.3.7 2010.08.06 Trojan/Win32.Banload.gen
Authentium 5.2.0.5 2010.08.07 W32/MalwareS.ZYA
Avast 4.8.1351.0 2010.08.07 -
Avast5 5.0.332.0 2010.08.07 -
AVG 9.0.0.851 2010.08.07 Downloader.Banload.AUZG
BitDefender 7.2 2010.08.07 -
CAT-QuickHeal 11.00 2010.08.07 TrojanDownloader.Banload.arzc
ClamAV 0.96.0.3-git 2010.08.07 Trojan.Downloader-90794
Comodo 5672 2010.08.07 -
DrWeb 5.0.2.03300 2010.08.07 -
Emsisoft 5.0.0.36 2010.08.07 Trojan-Downloader.Win32.Banload!IK
eSafe 7.0.17.0 2010.08.05 -
eTrust-Vet 36.1.7773 2010.08.07 -
F-Prot 4.6.1.107 2010.08.07 W32/MalwareS.ZYA
F-Secure 9.0.15370.0 2010.08.07 -
Fortinet 4.1.143.0 2010.08.07 -
GData 21 2010.08.07 -
Ikarus T3.1.1.84.0 2010.08.07 Trojan-Downloader.Win32.Banload
Jiangmin 13.0.900 2010.08.07 TrojanDownloader.Banload.aknk
Kaspersky 7.0.0.125 2010.08.07 -
McAfee 5.400.0.1158 2010.08.07 Generic Downloader.x!dju
McAfee-GW-Edition 2010.1 2010.08.06 Generic Downloader.x!dju
Microsoft 1.6004 2010.08.07 TrojanDownloader:Win32/Troxen!rts
NOD32 5348 2010.08.06 probably a variant of Win32/TrojanDownloader.Banload
Norman 6.05.11 2010.08.07 Suspicious_Gen2.AYSVZ
nProtect 2010-08-07.01 2010.08.07 Trojan-Downloader/W32.Banload_Packed.301056
Panda 10.0.2.7 2010.08.07 -
PCTools 7.0.3.5 2010.08.07 Downloader.Generic
Prevx 3.0 2010.08.07 -
Rising 22.59.05.04 2010.08.07 Trojan.Win32.Generic.52088337
Sophos 4.56.0 2010.08.07 Mal/Generic-L
Sunbelt 6698 2010.08.07 Trojan.Win32.Generic!BT
SUPERAntiSpyware 4.40.0.1006 2010.08.07 -
Symantec 20101.1.1.7 2010.08.07 Downloader
TheHacker 6.5.2.1.336 2010.08.07 Trojan/Downloader.Banload.arzc
TrendMicro 9.120.0.1004 2010.08.07 TROJ_DLOADE.AVY
TrendMicro-HouseCall 9.120.0.1004 2010.08.07 TROJ_DLOADE.AVY
VBA32 3.12.12.8 2010.08.04 Trojan.VBO.08317
ViRobot 2010.7.29.3961 2010.08.07 -
VirusBuster 5.0.27.0 2010.08.07 Trojan.DL.Banload.BGWH

[Spark]

I wonder how difficult it would be to port this to iPhone.

[ddsdavey]

QUOTE(smashhh @ Nov 22 2009, 12:48 PM)

I think that is m$ spy tool!!
I read every posts at many sites, when you use this "tool" you will be ban immediately!!
My McAfee says that is trojan...

Lmfao,what? Ban the Pc your using the app on,lol!

[blackg1000]

This may sound like a silly question but how do I get my decrypted X value? I've got my console serial but I don't know how to get my X value.


Thanks.

[Roytjehh]

QUOTE(blackg1000 @ Nov 1 2010, 01:49 PM)

This may sound like a silly question but how do I get my decrypted X value? I've got my console serial but I don't know how to get my X value.
Thanks.

Under Settings > System Info on your 360, check the value right after the ''X:'' symbol. type that in the Crypted value and along with your Serial number should present a result.

[moonphrogg]

Well, just checked mine. My cousin updated my console to the new dash without asking me and I popped my backup of Fable 3 without looking. . .

XVal has confirmed my suspicion:

0000000000000001
Failed AP25 Challenge

At least we know it works. Unfortunately, now I know it's only a matter of time before I get the axe.

[spen720]

There are a lot of questions in my post, I will tell my full story and await theories and advice from the wonderful users of this forum. ANY discussion of backups here relates to backups I have made myself, of software I already own.


I had a Hitachi 47DJ drive with OFW as a reserve xbox360. This console logged into LIVE fine and played original titles fine throughout the summer of 2010.

I upgraded to the kinect dash when it came online.

I decided, in my infinite wisdom after upgrading to the kinect dash, to modify the FW on the drive to iextreme 1.51. The console still has not connected to live with this FW on the drive as this FW was unsafe for LIVE.

I played a few ssv1(WAVE 3, 6, 5) backups on the console, all offline.
(After further research I now know that ssv2  verified versions of my self made backups are safer hence the reason for my concerns)

The console has remained offline and has not connected with any modified FW on the drive or potential flags in the secdata/on the NAND.

I recently upgraded the modified FW to LT+ v1.1 (thanks C4EVA!) and again researched the intricacies of verifying my back-ups within the ABGX GUI (1.0.5)

A back-up disc has not been in the drive since the LT+ v1.1 FW upgrade, nor has the console connected to LIVE since ANY modified FW has been on the drive.

The Xval software is an interesting piece of coding and raises a couple of questions.

1. If an Xval check shows clean secdata, is this data a representation of all checks to come from the LIVE server for a ban?
(bear in mind the outputs possible:)

QUOTE(Surazal @ Nov 20 2009, 02:02 PM)

Someone on IRC asked what outputs there were besides "Secdata is Clean" and "Console Banned"

I took a look and here is the list I saw as potential outputs from Xval_v2.0:

CODE

Console Serial length incorrect!
Console Serial is wrong!
Encrypted X Value length incorrect!
Encrypted X Value is wrong!
Secdata is Clean
Secdata is invalid
Secdata decryption error
Failed AP25 Challenge
Tampered AP25 Table
Reverted AP25 Table
Invalid DVD Geometry (does this refer ssv1/2?)
Invalid DVD DMI
DVD Keyvault Pair Mismatch
Invalid CRL Data
CRL Certificate Revoked
Unauthorized Install
Keyvault Policy Violation
Console Banned
ODD Violation
Unknown Violation(s)

I can only guess the information concerning use of a bad rip shows with a flag for Invalid DMI or Invalid DVD geometry (is this ssv?).

2. How can I be flagged server side if the console hasn't connected to live.

The long and short of it is this, I ran the xval software and came up clean. Would you connect to livel? lol!!

look forward to any advice/help

TIA!!!

[rokker72]

Hi there, a pair of weeks ago I tried Fable 3, not a copy, the original DVD, on my Xbox iXtreme 1.5, an for the first time I see the unreadble error due to the ap2.5 upgrade.

I see on the web that my Xbox should be flagged, but a fwe days after I go online, just to upgrade Fifa 11, and everything works fine.

Now I checked my Xbox with Xval 2.0, and the result is secdata clean.

This means that the original game can't just be read, but being original doesn't flagged my Xbox? Or it's flagged but will be banned in the next ban from MS?

Thank you very much guys