vxLock ransomware-affected file
File type: Ransomware encrypted file
A .vxlock file is a file encrypted and renamed by the vxLock ransomware.
The suffix identifies an affected victim file rather than a file created in a normal document format.
File type category:
Ransomware encrypted file
Date updated: October 16, 2026
The vxlock file extension is associated with vxLock, a ransomware strain first encountered in January 2017. The ransomware encrypts files on an affected system and appends the .vxlock suffix when renaming them.
After encrypting the files, vxLock demands a ransom in exchange for restoring access. The .vxlock file does not contain a usable version of the original file unless its encrypted contents are successfully decrypted.
A .vxlock file cannot normally be opened by the application that created the original file because its contents are encrypted. No generally available decryptor is identified for vxLock files.
Changing the suffix or opening the file with another application will not restore its contents.
A .vxlock file cannot be meaningfully converted while it remains encrypted. It must first be decrypted, after which the recovered original file can be opened or exported using an appropriate application.
Language