My System is infected with .nobu ransomware virus

Charlston

Hello Community,

Need urgent help.

My PC is infected with the .nobu virus, what do I do to have this sorted out, many of my images and documents have the .nobu file extension, I am unable to open the files.

Please help.

Thank you,

Charlston.

Alex_A

https://community.bitdefender.com/en/discussion/83632/my-system-is-infected-with-nobu-ransomware-virus

Check on this site if your files can be decrypted - https://www.nomoreransom.org/

Charlston

I tried the above website but its unsuccessful .

Not all the files on my system have been encrypted, when i noticed something was wrong, i scanned my PC using Hitman Pro, and quite a few were detected and removed it.

if the trojan/virus has not been sucessfully removed from my system and it infect/encrypt more files than it already has ?

Please advice, I am very stressed, I am a photographer and my system has alot of images and videos which I have yet to deliver to clients, I have backups of previous events but no back ups of the just recent ones i shot.

TIA,

Charlston.

Alex_A

https://community.bitdefender.com/en/discussion/comment/299125#Comment_299125

I would have done this, removed the hard drive from the computer. I would connect it to a clean system (computer) as if it were a portable hard drive and scanned it with some antivirus scanners. Moved the necessary uninfected files to another removable disk. Then I would deal with encrypted files. Try with kaspersky and Emsisoft - https://noransom.kaspersky.com/ ; https://www.emsisoft.com/ransomware-decryption-tools/

Alex_A

Here's another site, anti ransomware. Emsisoft works with them. - https://id-ransomware.malwarehunterteam.com/

Flexx

https://community.bitdefender.com/en/discussion/83632/my-system-is-infected-with-nobu-ransomware-virus

Hi Member,

1) .nobu ransomware is a new variant of stop (djvu) ransomware.

More information : https://id-ransomware.malwarehunterteam.com/identify.php?case=707e906651c1df975d1995ed0774d576e97b754e

Being a new strain there are less chances that the encrypted files can be decrypted, though you can check the resolution provided in the above stated link.

2) Additionally, go to the following link at Bleeping Computers, register and open a topic there, they will help you better (https://www.bleepingcomputer.com/forums/f/239/ransomware-help-tech-support/)

3) If you are willing to pay a little amount, you can contact Dr.Web antivirus company to whom you can send the encrypted files and if they are able to decrypt your files, they will help you out.

Request support from Dr.Web antivirus through https://support.drweb.com/new/free_unlocker/for_decode/

Regards

Flex

(Bitdefender beta tester 2019/ 2020)

Charlston

https://community.bitdefender.com/en/discussion/comment/299127#Comment_299127

Hello Alex,

Yes, I have moved the uncrpyted files to another hard drive.

I have used the above website suggestions you have mentioned but its unsuccessful

Thanks in adavnce.

Charlston.

Charlston

https://community.bitdefender.com/en/discussion/comment/299128#Comment_299128

I tries this too.

Charlston

https://community.bitdefender.com/en/discussion/comment/299131#Comment_299131

Thank you Flexx, I have submitted the encryted file on the Dr.web, hope they are able to decrypt it.

Thanks again.