Emsisoft Decrypter for Xorist combats the Xorist ransomware which is noted to be very customizable and can easily be purchased in a kit.

This toolkit provides these criminals with a way to fully customize the ransomware including the specific ransomware message, which file extensions are to be targetted, the ransom note file name, encrypted file extension and unlock password. This allows the criminals to tailor the hit and make it incredibly personal.

Following are some of the extensions that Xorist targets by default:

.zip, .rar, .7z, .tar, .gzip, .jpg, .jpeg, .psd, .cdr, .dwg, .max, .bmp, .gif, .png, .doc, .docx, .xls, .xlsx, .ppt, .pptx, .txt, .pdf, .djvu, .htm, *html, .mdb, .cer, .p12, .pfx, .kwm, .pwm, .1cd, .md, .mdf, .dbf, .odt, .vob, .ifo, .lnk, .torrent, .mov, .m2v, .3gp, .mpeg, .mpg, .flv, .avi, .mp4, .wmv, .divx, .mkv, .mp3, .wav, .flac, .ape, .wma, .ac3.

To use the Emsisoft Decrypter for Xorist, it requires a 144 byte or more encrypted file as well as its unencrypted counterpart. Then, all you need to do is select both the encrypted and unencrypted files and drag and drop them onto the Emsisoft Decrypter for Xorist executable.