How to Deal with File Encryption Issues Caused by Ransomware
In today’s digital landscape, ransomware attacks are an unfortunate reality that can wreak havoc on users, especially those who rely on their computers for important tasks. Recently, I encountered a distressing situation involving my teacher’s laptop, which is now compromised by files that have been altered with a “.nobu” extension.
The Situation
My teacher downloaded several PDF files from an unverified site, which led to a barrage of unauthorized programs popping up in the task manager. The unexpected outcome was that all files on the laptop were transformed into the “.nobu” extension, rendering them unusable. With no backup available and the restore point feature disabled, I knew I had to act fast.
Initial Steps Taken
To tackle this issue, I started by running Malwarebytes to check for potential malware on the system. The recovery of crucial files is a primary concern, particularly because some of the most important documents are Eagle files used for designing printed circuit boards (PCBs). Unfortunately, even the Eagle software application seems to have been affected by the ransomware, as it can no longer be found or launched.
Progress and Investigations
Further investigation revealed that the encryption may involve an online key, and attempts at using Emsisoft for decryption were unsuccessful. I appreciate all of the support and advice from the community — it truly demonstrates the power of collective knowledge as my teacher had the opportunity to see how many people were willing to help.
While my teacher is well-versed in electronics and works in an IT firm, I hesitated to share this background initially, thinking it might distract from the urgency of the matter. His laptop serves as a critical tool for designing PCBs, as well as for programming in languages like C and Arduino.
Visual Evidence
To provide better context for the situation, I’ve attached some screenshots that capture the state of his desktop and the ransomware letter. Unfortunately, I faced difficulties capturing screens through conventional methods, but I managed to take some pictures instead.
Moving Forward
Despite the grim circumstances, I plan to explore all possible decryption software options before resorting to formatting the laptop. Thank you to everyone who has offered help and shared advice. Your support means a lot, and we remain hopeful
Share this content:
