Jaimepen 0 Posted May 15, 2019 Report Share Posted May 15, 2019 My computer have been infected by ransomware SODINOKIBI, all files have been encripted with an extension ".901i56" I have come to this forum after having tried a lot of solutions. And unfortunately I have done everything that it says that there is no need to do in the first steps when it comes to ransomware. If you have any help I would be very useful because I have lost very important files. Thank you. Quote Link to post Share on other sites
stapp 155 Posted May 15, 2019 Report Share Posted May 15, 2019 It is recommended to upload a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with to this site here:https://id-ransomware.malwarehunterteam.com/ You can then paste a link to the results into a reply so that one of our experts can review them. Quote Link to post Share on other sites
Amigo-A 136 Posted May 15, 2019 Report Share Posted May 15, 2019 Yes, this malware called Sodinokibi Ransomware or BlueBackground Ransomwarehttps://id-ransomware.blogspot.com/2019/04/sodinokibi-ransomware.html In ID Ransomware it is also called Sodinokibi Extension: .<random_personal> Ransom note" <random_personal>-readme.txt At the moment I’ve prepared several variants for publicationid my Digest, but only the first one is described. Samples for research are in my article. Quote Link to post Share on other sites
Amigo-A 136 Posted May 15, 2019 Report Share Posted May 15, 2019 No one has reported so far that he can decrypt files. Samples still collect. You do not need to panic, and patiently wait for the answer decryption specialists. Perhaps they have something to say to you. Quote Link to post Share on other sites
MagWm 0 Posted December 11, 2019 Report Share Posted December 11, 2019 is there any news for this ransomware? we have also been hit hard. Quote Link to post Share on other sites
GT500 873 Posted December 12, 2019 Report Share Posted December 12, 2019 17 hours ago, MagWm said: is there any news for this ransomware? we have also been hit hard. Our recommendation right now (especially for businesses) is to contact Coveware. They should be able to help reduce the ransom payment for you. Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.