QSCX Ransomware Encrypted File
2.0 | 2 Votes
What is a QSCX file?
In June 2021, some PC users began reporting their computers had been infected by a new variant of STOP ransomware. This variant encrypts users' files and appends them with the .qscx extension. This prevents users from opening and using the files.
The ransomware then produces a plain text ransom note named _readme.txt in every folder that contains an infected file. The note contains instructions users are meant to follow to decrypt their files.
How did my computer get infected by QSCX ransomware?
QSCX ransomware is most commonly distributed within "free programs" that are actually adware and malware bundles. If you recently downloaded and installed a "free program" (especially one that is meant to be a copy of a paid program) from a software download website, that may be how your computer became infected by QSCX ransomware.
NOTE: To learn more about STOP ransomware and its variants, refer to the .STOP entry.
How to open a QSCX file
Because QSCX files are encrypted, you cannot open them. Additionally, because QSCX files are encrypted using an online private key, there is no way to decrypt them.
If your computer has been infected by QSCX ransomware, the best option to restore your files to their original state is likely to perform a System Restore. Note that performing a System Restore will cause you to lose any data created in the interval between now and your last restore point. So, you may want to back up any data and files created since your last restore point.
FileInfo.com recommends you never pay a ransom to decrypt files encrypted by ransomware. Paying a ransom encourages ransomware distributors to continue their efforts, and there is no guarantee that paying a ransom will give you access to your files. Instead, you should restore your data from a recent backup created before the ransomware infected your computer.