CompuTips

What is Qotr ransomware?

Qotr is a new strain of the STOP/Djvu ransomware virus. Many such strain exist, and all of them are very similar to each other (compare Iotr, for example). This is because all of them use the same computer code, so it’s easy for the hackers to produce new strains.
The absolute majority of viruses nowadays are created for financial gain, however, there are different methods of accomplishing this objective. Some viruses use the victim’s computer to generate cryptocurrency, some attempt to get access to the victim’s bank account. Ransomware viruses, meanwhile, use cryptography to stop the victim from accessing their files, and demand payment for the reversal of this procedure. This is the method that STOP/Djvu – and, by extension, Qotr – uses.
STOP/Djvu viruses encrypt the files and give them a four-letter extension (.qotr file extension, in this case). Then, the hackers demand $980 or $490 for decryption. More information about the hackers’ demands can be found in the “_readme.txt” file, a ransom note created by the virus (pictured on the image above).
Few people would be comfortable paying almost a thousand US dollars to restore their files, and so, there is a demand for alternative solutions. Our guide aims to address this demand; it will teach you how to remove Qotr ransomware and decrypt .qotr files without paying the cybercriminals.