Anubis ransomware affected file
File type: Ransomware encrypted file
A .coded file is an encrypted file whose name was changed by the Anubis ransomware.
The extension does not identify a normal file format. It marks a file affected by the ransomware.
File type category:
Ransomware encrypted file
Date updated: October 6, 2026
Anubis is ransomware that encrypts files on an affected computer and changes their file extension to .coded. The affected files may include documents, pictures, and other personal data.
The contents remain associated with the original file, but encryption prevents the normal application from reading them. The extension is a marker used by the malware, not an independent format with a standard specification.
A .coded file cannot normally be opened by changing its extension or selecting a regular application. It must first be decrypted with a decryptor that specifically supports the Anubis ransomware, if one is available.
If no compatible decryptor exists, restore the original files from a clean backup or another unaffected copy. Paying a ransom does not guarantee recovery.
There is no meaningful way to convert a .coded file while it remains encrypted. File-conversion software cannot replace the decryption step.
After the files are successfully decrypted or restored from backup, they can be opened and converted using the applications associated with their original file types.
Language