How to remove Tury ransomware

What is Tury ransomware?

Tury is a computer virus labelled as ransomware. It belongs to the STOP/Djvu ransomware family (a group of viruses generally similar in behavior). Tohj ransomware is an example of another malware in this family.
All ransomware viruses make money by encrypting victims’ files, and Tury is no exception. Once the files are encrypted, Tury renames them, adding .tury file extension. It also leaves a ransom note, called “_readme.txt” on the Desktop.
You can read the full text of the note in the image above, but here’s the recap. The criminals mention their contact information and that the decryption price is $980 (or half as much if the victim pays promptly). They also offer to decrypt one file to show you that the files are indeed recoverable.
You should note, however, that this doesn’t mean that they will recover them should you choose to pay. It is common for the hackers to ghost their victims once they’ve paid. Thankfully, it is possible to deal with this issue without contacting the cybercriminals at all. Our guide will explain how to remove Tury ransomware and decrypt .tury files for free.

Scroll to top