Avast Decryption Tool for CrySiS can unlock CrySiS (JohnyCryptor, Virus-Encode, Aura, Dharma), a ransomware strain. All the Avast Decryption Tools are available in one zip here.

It uses AES-256 combined with RSA-1024 asymmetric encryption.

Encrypted files have many various extensions, including:

.johnycryptor@hackermail.com.xtbl,
.ecovector2@aol.com.xtbl,
.systemdown@india.com.xtbl,
.Vegclass@aol.com.xtbl,
.{milarepa.lotos@aol.com}.CrySiS,
.{Greg_blood@india.com}.xtbl,
.{savepanda@india.com}.xtbl,
.{arzamass7@163.com}.xtbl,
.{3angle@india.com}.dharma,
.{tombit@india.com}.dharma,
.wallet

After encrypting your files, numerous possible messages appear, as seen in our screenshots. The message is located in "Decryption instructions.txt," "Decryptions instructions.txt," "README.txt," "Readme to restore your files.txt," or "HOW TO DECRYPT YOUR DATA.txt" on the user's desktop. Also, the desktop background is changed to one of the pictures below.

Similar:

Which Anti-Malware App Is Best and Can It Run Alongside My Antivirus

What's the Best Antivirus and Is Windows Defender Good Enough?

Windows Device Performance & Health Explained

How to Tell the Difference Between a Virus and a False Positive

How to Manage Windows Defender Antivirus Found Threats

What to Do When Your Norton or McAfee Antivirus Expire