Jaimepen 0 Report post Posted May 15 My computer have been infected by ransomware SODINOKIBI, all files have been encripted with an extension ".901i56" I have come to this forum after having tried a lot of solutions. And unfortunately I have done everything that it says that there is no need to do in the first steps when it comes to ransomware. If you have any help I would be very useful because I have lost very important files. Thank you. Quote Share this post Link to post Share on other sites
stapp 125 Report post Posted May 15 It is recommended to upload a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with to this site here:https://id-ransomware.malwarehunterteam.com/ You can then paste a link to the results into a reply so that one of our experts can review them. Quote Share this post Link to post Share on other sites
Amigo-A 18 Report post Posted May 15 Yes, this malware called Sodinokibi Ransomware or BlueBackground Ransomwarehttps://id-ransomware.blogspot.com/2019/04/sodinokibi-ransomware.html In ID Ransomware it is also called Sodinokibi Extension: .<random_personal> Ransom note" <random_personal>-readme.txt At the moment I’ve prepared several variants for publicationid my Digest, but only the first one is described. Samples for research are in my article. Quote Share this post Link to post Share on other sites
Amigo-A 18 Report post Posted May 15 No one has reported so far that he can decrypt files. Samples still collect. You do not need to panic, and patiently wait for the answer decryption specialists. Perhaps they have something to say to you. Quote Share this post Link to post Share on other sites
