Remove Qall Ransomware

Qall Ransomware is a file-encryption Trojan that could cause permanent damage to your data. The attack of this malware consists of encrypting various types of files, and then extorting their owner for money. Unfortunately, the Qall Ransomware is not compatible with free decryption tools – victims of this malware might need to resort to alternative, unreliable data recovery options. We have identified this malware family to be a part of the STOP/Djvu Ransomware series of file-lockers.

Just like other STOP variants, this one also appends a four-character suffix to the names of files it locks. In this case, it uses the extension '.qall' to tag their names. After the file-encryption stage of the attack is complete, the malware drops the '_readme.txt' ransom document. The latter contains a short message, which describes the attack, and instructs victims on what to do next.

Of course, the creators of the ransomware are after the victim's money. They claim to be ready to unlock 1-2 files for free in order to prove their credibility. However, they warn the victim that a full decryption service will only be provided to those who agree to pay a ransom fee via Bitcoin. The criminals ask for the payment to be made via Bitcoin. They also provide these two emails for contact – support@sysmail.ch and supportsys@airmail.cc.

Victims of the Qall Ransomware should not consider the offer of the hackers, because they could end up scammed. It is not uncommon for ransomware operators to take the money of the victim, and then ignore their pleas for help. Our advice for Qall Ransomware victims is to run an anti-malware tool, and then try out other data recovery solutions.