Qwciphered File Virus

Please help me. All my documents, images and music files are encrypted. It now has a file extension .QWCiPhErEd. I believe that this virus was acquired when I attempted to watch a video. I forgot the name of the site. It downloaded some player on my computer then after that, my computer hangs. After I reboot my computer, I noticed that all my files are having .QWCiPhErEd extension. Like for example, the file mypics.bmp will have the new virus file called mypics.bmp.QWCiPhErEd. When I try to open it, this message will appear.

Attention! All your files are encrypted!
You are using unlicensed programs!
To restore your files and access them, send code Ukash or Paysafecard nominal value of EUR 50 to the e-mail Tenagliamirella@gmail.com.
During the day you receive the answer with the code.
You have 5 attempts to enter the code. If you exceed this date all data is irretrievably spoiled. Be careful when you enter the code!

Please help me decrypt these files. All of it are very important to me. Also, teach me how to remove this QWCIPHERED virus. Thanks in advance.

1 Response

  1. Miko says:

    I submitted a bunch of files to Dr Web team. They replied with a code to use with Qwciphered files. Also, they already released the new version of te94decrypt.exe which caters to this kind of virus. To use it, you can use the key –k 103. Therefore, the full command would be “te94decrypt.exe –k 103”.

    I’ve used it to decrypt all files on my infected PC. All my file was saved by Dr Web.