Skip to content

Malware

Exorcist

According to PCrisk, Exorcist is a ransomware-type malicious program.

Exorcist is a Windows malware family.

Background

PCrisk classifies Exorcist as a ransomware family that encrypts data on compromised machines and then demands payment for decryption. As files are locked, each one receives a new extension made up of a random string of characters.

A file originally called "1.jpg," for instance, might end up as "1.jpg.rnyZoV" once encrypted. Once encryption finishes, Exorcist swaps the desktop wallpaper and writes HTML application files named "[random-string]-decrypt.hta" (such as "rnyZoV-decrypt.hta") into the affected directories, all of which carry the same ransom note.


Source: Malpedia (Fraunhofer FKIE).