Urgent Help Needed: Files Encrypted with .nobu Extension on Teacher’s Laptop

I need assistance regarding a troubling situation involving my teacher’s laptop. Recently, while attempting to download PDFs from a website, his machine became infected with some malicious software. Now, all of his important files have been altered to include the “.nobu” extension, and a plethora of unfamiliar and potentially harmful programs have appeared in the task manager.

The Current Dilemma

I have taken the first step towards recovery by running Malwarebytes, but these files are crucial, and he does not have any backups available. Unfortunately, the restoration options to revert to a previous point in time are not viable. Therefore, I am reaching out to the community for guidance on how to remove the .nobu extension from the files he desperately needs.

Updates on the Situation

• Update #1: The most critical files affected are design files for PCBs that he uses in his work. It appears that the ransomware has compromised the software used to access them, rendering it inoperable.
• Update #2: It seems the encryption relies on an online key. My attempt to use Emsisoft’s decryption tool has not yielded results.
• Update #3: A heartfelt thank you to everyone who has offered support; it’s overwhelming to see the community rallying together. My teacher, who primarily works in the electronics field and considers teaching a side job, was genuinely moved by the responses. He uses this laptop not only for PCB design but also for programming and Arduino projects.
• Update #4: I’ve shared some images taken directly from my phone, as traditional screenshot methods were unresponsive. These include a photo of his desktop and the ransomware message he received.

Before resorting to formatting the laptop, I am determined to explore all available decryption software. Any advice or suggestions from those experienced in dealing with ransomware would be greatly appreciated. Thank you!