How to remove Coty ransomware

What is Coty ransomware?

Coty is a malicious program in the STOP/Djvu virus group. As a ransomware program, its main purpose is to encrypt the files on the infected computers, then demand payment from the victims on a promise to give them their files back afterwards. The virus may also engage in other nefarious activities, such as stealing passwords and other sensitive data.
Although STOP/Djvu group included many similar viruses, there is an easy way to identify Coty ransomware. Files encrypted by it have .coty file extension, and will be identified as “COTY File” by Windows Explorer.
Getting your files back, however, is more important than double-checking what virus you were infected by. The hackers leave a ransom note, “_readme.txt”, in which they offer a solution: pay them $980 and maybe you’ll get your files back. Maybe. These hackers often disappear after receiving money, so decryption is by no means a certainty. And it’s very expensive, too, even with that 50% discount the hackers oh-so-generously offer.
But there are other options you can pursue to remove Coty ransomware and decrypt .coty files. Read the guide below and learn about them.

Scroll to top