# \[SOLVED\] How to restore .Coot Virus files?

**URL:** <https://onehack.st/t/solved-how-to-restore-coot-virus-files/74945>\
**Category:** Discussion & Solutions\
**Tags:** hacking, antivirus\
**Created:** [March 24, 2020, 2:51pm UTC](https://onehack.st/t/solved-how-to-restore-coot-virus-files/74945 "2020-03-24T14:51:57Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Neomati](https://onehack.st/user_avatar/onehack.st/neomati/32/32412_2.png) [@Neomati](https://onehack.st/u/Neomati)\
**Post date:** [March 24, 2020, 2:51pm UTC](https://onehack.st/t/solved-how-to-restore-coot-virus-files/74945/1 "2020-03-24T14:51:58Z")

</div>

Hey Guys,

So i have an issue where by one of the computers has been infected and now files have been changed to a “.coot” extension.

Any ideas on how to decrypt it and stop such ransomware infections for the future on a Windows Desktop.

---

<div class="post-metadata">

**Author:** ![dydx](https://onehack.st/user_avatar/onehack.st/dydx/32/36729_2.png) [@dydx](https://onehack.st/u/dydx)\
**Post date:** [March 24, 2020, 3:15pm UTC](https://onehack.st/t/solved-how-to-restore-coot-virus-files/74945/2 "2020-03-24T15:15:02Z")

</div>

wondering to know…

---

<div class="post-metadata">

**Author:** ![MOHIII](https://onehack.st/user_avatar/onehack.st/mohiii/32/28498_2.png) [@MOHIII](https://onehack.st/u/MOHIII)\
**Post date:** [March 24, 2020, 9:09pm UTC](https://onehack.st/t/solved-how-to-restore-coot-virus-files/74945/3 "2020-03-24T21:09:44Z")

</div>

I have the same problem 😥

---

<div class="post-metadata">

**Author:** ![JovialH4ckr](https://onehack.st/user_avatar/onehack.st/jovialh4ckr/32/32203_2.png) [@JovialH4ckr](https://onehack.st/u/JovialH4ckr)\
**Post date:** [March 24, 2020, 10:30pm UTC](https://onehack.st/t/solved-how-to-restore-coot-virus-files/74945/4 "2020-03-24T22:30:37Z")

</div>

Read the posts below to know how to decrypt .coot extention.

> [@\[SOLVED\] Ransomware Antivirus Remove .coot](https://onehack.st/t/solved-ransomware-antivirus-remove-coot/63863/3):
>
> It’s not possible for anyone to decrypt properly, the files will get corrupt eventually, so you need to format your system and re-install again imo, but there are some useful guides which you can take a look at it and try to get as much files decrypted as you can… Without corrupting the base! [https://malwaretips.com/blogs/remove-coot/](https://malwaretips.com/blogs/remove-coot/)[https://www.pcrisk.com/removal-guides/16199-coot-ransomware](https://www.pcrisk.com/removal-guides/16199-coot-ransomware)[https://geeksadvice.com/remove-coot-ransomware-virus/](https://geeksadvice.com/remove-coot-ransomware-virus/)[https://bestsecuritysearch.com/remove-coot-v…](https://bestsecuritysearch.com/remove-coot-virus-ransomware-restore-files/)

Also read:

> [@\[SOLVED\] Ransomware Antivirus Remove .coot](https://onehack.st/t/solved-ransomware-antivirus-remove-coot/63863/2):
>
> Let me make it easy as your friend already changed the OS, so better let’s try to go with an easy method to get rid of it first, instead of making any restore point or considering to go with decrypt option (it may cost to buy the tool freeware won’t do much). Just mentioning this for your knowledge, Until unless you wipe the entire partitions or deleted the one which an OS installed in it, Restore point ain’t going anywhere, it’s just another method to get them started, normally unless anyone s…