Urgent Help Needed: Ransomware Attack Turns All Files Unreadable

Recently, a troubling situation unfolded when my teacher encountered a ransomware attack that transformed all files on his laptop, leaving them with a confusing “.nobu” extension. While trying to salvage what he could after downloading some PDFs from an untrustworthy source, he found his system flooded with fake programs in the task manager.

The Current Situation:
I immediately ran a malware scan using Malwarebytes, as his files are crucial and unfortunately, he has no backup available. Restoring his system to a previous point isn’t an option. Is there any way to eliminate the “.nobu” extension from all files? Any assistance or advice would be greatly appreciated. I’m happy to provide screenshots if necessary.

Important Files at Risk:
Among the documents affected are vital Eagle files essential for PCB design work. Not only has the encryption compromised the documents, but it has also impacted the related software, rendering it unusable.

Updates on the Situation:
– Update 1: After delving deeper into the issue, we learned that the ransomware seems to use an online key for encryption. I attempted to use Emsisoft’s decryption tool, but unfortunately, it was ineffective.
– Update 2: I appreciate the overwhelming support from the community; my teacher was touched by the response to our post. He typically works in electronics and IT, and teaching is a secondary role for him. His laptop primarily serves for PCB design, C programming, and Arduino projects.
– Update 3: To provide some visual context, I’ll be sharing images of his desktop and the ransom note since traditional screenshots were not working. His Desktop and Ransomware Letter.

I plan to exhaust all available decryption tools before considering a complete system format. Any advice or suggestions from the community would be invaluable in this desperate situation. Thank you!