Urgent Help Needed: Files on Teacher’s Laptop Infected with Ransomware!

Recently, a concerning situation unfolded involving my teacher’s laptop. After downloading several PDFs from an untrustworthy source, his computer became compromised, resulting in the majority of his files being rendered inaccessible, with a peculiar “.nobu” extension now attached. This unfortunate incident has also filled the Task Manager with suspicious programs, indicating a potential ransomware infection.

Steps Taken So Far

In an effort to mitigate this issue, I ran a Malwarebytes scan on the machine. Unfortunately, my teacher does not have a backup of his important files, and restoring to an earlier point is not an option. Therefore, I’m seeking assistance on how to effectively remove the “.nobu” extension from all affected files. If you have any suggestions or solutions, your help would be invaluable!

Critical Files at Stake

To complicate matters further, some of the most crucial files affected belong to an engineering design software used for creating printed circuit boards (PCBs). The ransomware has also compromised this application, making it inoperable and unreachable.

Updates on the Situation

• Update 1: It is now evident that the encryption is linked to an online key. I attempted to use Emsisoft for recovery, but sadly, it proved ineffective.
• Update 2: I appreciate the overwhelming support from the community. My teacher was genuinely touched to see so many individuals responding to our plea for help during this stressful time.
• Update 3: Although I initially hesitated to share details—worried that others might dismiss our plight—it’s significant to note that my teacher has a strong background in electronics and currently works in the IT field. Teaching is a secondary role for him, where he utilizes his laptop predominantly for PCB design, C programming, and Arduino projects.
• Update 4: I’ve included some images that I captured with my phone, as standard screenshot methods were unresponsive. These visuals provide a clearer insight into the current state of his desktop and the ransomware message he received:
• 
• 

What’s Next?

I plan to explore every available decryption tool before considering a full format of the laptop. If anyone has encountered a similar situation or has insights into potential remedies, please reach out!