What is Coverton Ransomware?

Coverton is a type of malicious software that encrypts your files and demands a ransom for the decryption key. This ransomware was first spotted in the wild on May 12th, 2016, and like many others, uses strong encryption algorithms that make it virtually impossible to decrypt your files without the key. We believe Coverton Ransomware to be a variant of the CryptXXX.

How does Coverton infect your computer?

Someone typically spread Coverton Ransomware through email attachments or malicious links. The email may pose as a legitimate email from a company or individual that you know. The email will probably have an attachment or link that, when clicked, will download and install the Coverton Ransomware onto your computer. Once Coverton is installed, it will scan your computer for files to encrypt.

What will Coverton do to your computer?

Once Coverton Ransomware has encrypted your files, it will display a ransom note named " Coverton-DECRYPT.txt" that demands payment of 2 Bitcoins (roughly USD 1,000) to decrypt your files. The ransom note will also provide instructions on how to purchase and send Bitcoins. Coverton Ransomware will also change your desktop background to an image that contains the ransom note.

What encryption algorithm does Coverton Ransomware use?

Coverton uses the RSA-2048 encryption algorithm.

What types of files does Coverton encrypt?

Coverton Ransomware will encrypt a wide variety of file types, including documents, images, videos, and more.

Protection against Coverton

Coverton Ransomware is a serious threat to your computer and your files. To protect yourself from Coverton, you should have a reliable and up-to-date anti-virus/anti-malware program installed on your computer. You should also avoid opening email attachments or clicking on links from unknown or untrustworthy sources.

What should you do if it infected you with Coverton?

If it infected you with Coverton, you should immediately disconnect your computer from the internet to prevent the ransomware from encrypting any more files. You should then scan your computer with a reliable anti-virus/anti-malware program to remove the ransomware and restore any encrypted files from a backup.

Is there a public Coverton Ransomware decryption tool?

No, there is no public Coverton Ransomware decryption tool at this time.

Contact a data recovery service

If you have Coverton Ransomware and don’t have a backup, your only option may be to pay the ransom and hope that the attackers provide you with the decryption key. However, we recommend that you avoid paying the ransom, as there is no guarantee that you will receive the key. Instead, you should contact a data recovery service to see if they can help you recover your files.SalvageData has over a decade of experience helping businesses and individuals recover their data from all types of ransomware. We have a team of expert data recovery engineers who can help you get your data back. Contact us today to see how we can help you.