Coot virus. Please help.

[Karolis]

Hello! I have big problem. I have Coot virus and I cant open my all pictures. Maybe someone can help me? Please!

ATTENTION!

Don't worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:

Decrypt Software Overview.avi

1 file sent via WeTransfer, the simplest way to send your files around the world

we.tl

Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.


To get this software you need write on our e-mail:
salesrestoresoftware@firemail.cc

Reserve e-mail address to contact us:
salesrestoresoftware@gmail.com

Your personal ID:
0175Asd374y5iuhldH2dY76T79bXzlE6ABRldiLqBTPmZ48959nR9Ht13

 

[RockyRai]

i have problem and all files turned to white paper icon (text paper icon)


hope someone help

 

[nasdaq]

Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===
@Karolis


Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file:
In the Reply section in the bottom of the topic Select Click the Attach Files.
Navigate to the location of the File.
Click the file. It will appear in the reply section.
Click the Post Reply button.

Please post the logs for my review.

Let me know what problems persists.

Wait for further instructions
====

Note to @ RockyRai
TYou are not authorised to post in this topic.
If you still need help start your own topic.

 

[RockyRai]

Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===
@Karolis


Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file:
In the Reply section in the bottom of the topic Select Click the Attach Files.
Navigate to the location of the File.
Click the file. It will appear in the reply section.
Click the Post Reply button.

Please post the logs for my review.

Let me know what problems persists.

Wait for further instructions
====

Note to @ RockyRai
TYou are not authorised to post in this topic.
If you still need help start your own topic.

I have the same problem he has.. my extension is (.coot) as well. Am I still authorised to follow your guide? @nasplz help

I don't have backup files for them

 

[nasdaq]

Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===
@ UCUpdate

You can follow this topic but I recommend you start a new topic for your situation.

READ ME BEFORE POSTING IN THIS FORUM

By Staff - ***READ ME BEFORE POSTING IN THIS FORUM***

1. General rules for all the forums : Rules 2. Specific rules for this forum: This section of the forum provides help in identifying, removing malware and other general questions about malware. Please note that forum is staffed by volunteers. Be patient whilst waiting for a reply - there are...

malwaretips.com

Then Read this topic.

ID Ransomware

Upload a ransom note and/or sample encrypted file to identify the ransomware that has encrypted your data.

id-ransomware.malwarehunterteam.com

If interested submit a sample of the compromised files for review.
They will reply to you.

For any additional help create a topic. An helper, or me will be with you ASAP.