Mahipal singh Posted June 20, 2021 Report Share Posted June 20, 2021 Hi We have having a new ransomware in our computer called qscx And they asking money $440 From us and they incrrpted our all files and software and convert into .qscx we tried a lot of software but not working at all plz do help We will definitely looking forward to hearing form you Thx so much in advance for helping us Link to comment Share on other sites More sharing options...
Amigo-A Posted June 20, 2021 Report Share Posted June 20, 2021 Hello @Mahipal singh This is the result of a 'STOP Ransomware' attack. This criminal group has been attacking users all over the world for 3.5 years and no one can stop them. Description in English. Emsisoft has been supporting Decryptor development for several years. Support is provided free of charge. First please read this guide Link to comment Share on other sites More sharing options...
Amigo-A Posted June 20, 2021 Report Share Posted June 20, 2021 Run the decryptor, try pointing to any folder with encrypted files. The result will appear in the same window. Use the button "Copy log to clipboard". Press this button and paste result in new message here. Link to comment Share on other sites More sharing options...
fermasoli Posted June 23, 2021 Report Share Posted June 23, 2021 Link to comment Share on other sites More sharing options...
fermasoli Posted June 23, 2021 Report Share Posted June 23, 2021 Just now, fermasoli said: the descriptor gave this message at the end Link to comment Share on other sites More sharing options...
Amigo-A Posted June 24, 2021 Report Share Posted June 24, 2021 Quote O nome remoto não pode ser resolvido = Remote name can't be resolved /or/ The remote name could not be resolved The Emsisoft Staff will probably answer you in the next few hours. --- The Emsisoft Decryptor works only online, it needs a connection to the server to use the database. Check for interference with your opened internet connection (restricted access, VPN, etc.). Link to comment Share on other sites More sharing options...
fermasoli Posted June 28, 2021 Report Share Posted June 28, 2021 On 6/24/2021 at 7:55 AM, Amigo-A said: = Remote name can't be resolved /or/ The remote name could not be resolved The Emsisoft Staff will probably answer you in the next few hours. --- The Emsisoft Decryptor works only online, it needs a connection to the server to use the database. Check for interference with your opened internet connection (restricted access, VPN, etc.). Link to comment Share on other sites More sharing options...
fermasoli Posted June 28, 2021 Report Share Posted June 28, 2021 2 minutes ago, fermasoli said: Thanks for the feedback. With the machine connected to the internet, the program returns with this error. Link to comment Share on other sites More sharing options...
Amigo-A Posted June 29, 2021 Report Share Posted June 29, 2021 A technical investigation is likely to be required. You can archive a note and several different encrypted files so that Emsisoft Employees can check the case. Link to comment Share on other sites More sharing options...
fermasoli Posted July 7, 2021 Report Share Posted July 7, 2021 How should I attach and where should I send these files? I appreciate your help Link to comment Share on other sites More sharing options...
cybermetric Posted July 7, 2021 Report Share Posted July 7, 2021 1 hour ago, fermasoli said: How should I attach and where should I send these files? I appreciate your help The "error" is simply the decrypter's way of telling you that your files were encrypted by an online key, and cannot be decrypted. Simple as that. Link to comment Share on other sites More sharing options...
Amigo-A Posted July 7, 2021 Report Share Posted July 7, 2021 Thank to cybermetric. For some reason, these large images did not load for me and I could not see what is depicted on them. This has now been fixed and I see an error message with online ID, decryption is impossible It is recommended to save the encrypted files, perhaps in the future, there will be another decryption method or the extortionists will publish the keys for all affected users. ------------------------------------------------- I recommend this following method only when there is no other way, or when the affected user cannot wait long ... You decide what action to take. 1) If you have encrypted archives, you can partially recover them. Only 1-2 files are damaged there. The extension can be removed, and the files must be extracted. Everything except 1-2 files will be fixed. If there is only 1 file in the archive, then it will most likely be unrecoverable. 2) There is an alternative (additional) way to recover some media files: WAV, MP3, MP4, M4V, MOV, 3GP. https://www.disktuna.com/media_repair-file-repair-for-stop-djvu-mp3-mp4-3gp But before trying the alternative variant with media files, it is recommended that you make a copy of the encrypted files. Something will be restored better, something will be restored worse. An alternative method for other files has not yet been found. Link to comment Share on other sites More sharing options...
Recommended Posts