Avast Decryption Tool for CrySiS can unlock CrySiS (JohnyCryptor, Virus-Encode, Aura, Dharma), a ransomware strain. All the Avast Decryption Tools are available in one zip here.

Avast Decryption Tool for CrySiS can unlock CrySiS (JohnyCryptor, Virus-Encode, Aura, Dharma), a ransomware strain. All the Avast Decryption Tools are available in one zip here.

It uses AES-256 combined with RSA-1024 asymmetric encryption.

Encrypted files have many various extensions, including:

.johnycryptor@hackermail.com.xtbl,
.ecovector2@aol.com.xtbl,
.systemdown@india.com.xtbl,
.Vegclass@aol.com.xtbl,
.{milarepa.lotos@aol.com}.CrySiS,
.{Greg_blood@india.com}.xtbl,
.{savepanda@india.com}.xtbl,
.{arzamass7@163.com}.xtbl,
.{3angle@india.com}.dharma,
.{tombit@india.com}.dharma,
.wallet

After encrypting your files, numerous possible messages appear, as seen in our screenshots. The message is located in "Decryption instructions.txt", "Decryptions instructions.txt", "README.txt", "Readme to restore your files.txt" or "HOW TO DECRYPT YOUR DATA.txt" on the user's desktop. Also, the desktop background is changed to one of the pictures below.

 Download