Queclink Ransomware

The Queclink Ransomware is a threat that can wreak havoc on infected computers. Users will find themselves unable to access any of their business-related or personal files. Documents, archives, databases, PDFs, pictures, photos, etc. will all be locked with an uncrackable encryption algorithm. Afterward, the attackers will extort their victims for money, in exchange for providing the decryption key necessary to restore the data. Like most ransomware threats, Queclink also marks the files it has locked. The threat appends '.queclink' as a new extension to the original names of the encrypted files. Afterward, it will create three new files on the system's Desktop - 'RESTORE_FILES_INFO.hta,' 'RESTORE_FILES_INFO.txt,' and a file named after the username of the compromised device. The first two files deliver an identical ransom note, while the third one contains the IP address of the system, the data when the encryption took place, and a unique identifier string assigned to the specific victim.

Queclink Ransomware's Demands

The instructions left by the threat don't mention the exact sum of the ransom but they state the transactions must be carried out using the Bitcoin cryptocurrency. To receive additional details, users are directed towards messaging a provided email address - 'yourdata@RecoveryGroup.at.' The ransom note also contains various warnings. The hackers advise against relying on third-party data recovery groups as that could only lead to further monetary losses for the victims. Affected users also should try to avoid renaming any of the locked files as that could render them unsalvageable.

The full text of the ransom note is:

'What Happen to my computer?
Your important files are encrypted. Many of your documents, photos, passwords, databases and other files are no longer accessible because they have been encrypted. Maybe you are busy looking for way to recover your files , but do not waste your time. Nobody can recover your files without our decryption KEY (if somebody will tell that they can do it, they will also contact me and I will make the price so much expensive than if you contact directly).

!!!THE DATARECOVERY COMPANIES JUST WANT YOUR MONEY!!!
!!DATA RECOVERY COMPANIES WILL ONLY INCREASE THE DECRYPTION TIME!!

Can i Recover My Files?
Sure. We guarantee that you can recover all your files safely and easily But You have not so enough time . So If you want to decrypt all your data, you need to pay .As fast you pay as fast all of your data will be back as before encryption.

Send e-mail to this address: yourdata@RecoveryGroup.at

You have to pay for decryption in Bitcoins.

ATTENTION
Do not rename encrypted files.
Do not try to decrypt your data using third party software, it may cause permanent data loss.
Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.
If you want to try datarecovery company just ask for testfile.They have to give it for you if they can do something.

They will not.

Key Identifier:'