Jaimepen Posted May 15, 2019 Report Share Posted May 15, 2019 My computer have been infected by ransomware SODINOKIBI, all files have been encripted with an extension ".901i56" I have come to this forum after having tried a lot of solutions. And unfortunately I have done everything that it says that there is no need to do in the first steps when it comes to ransomware. If you have any help I would be very useful because I have lost very important files. Thank you. Link to comment Share on other sites More sharing options...
stapp Posted May 15, 2019 Report Share Posted May 15, 2019 It is recommended to upload a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with to this site here:https://id-ransomware.malwarehunterteam.com/ You can then paste a link to the results into a reply so that one of our experts can review them. Link to comment Share on other sites More sharing options...
Amigo-A Posted May 15, 2019 Report Share Posted May 15, 2019 Yes, this malware called Sodinokibi Ransomware or BlueBackground Ransomwarehttps://id-ransomware.blogspot.com/2019/04/sodinokibi-ransomware.html In ID Ransomware it is also called Sodinokibi Extension: .<random_personal> Ransom note" <random_personal>-readme.txt At the moment I’ve prepared several variants for publicationid my Digest, but only the first one is described. Samples for research are in my article. Link to comment Share on other sites More sharing options...
Amigo-A Posted May 15, 2019 Report Share Posted May 15, 2019 No one has reported so far that he can decrypt files. Samples still collect. You do not need to panic, and patiently wait for the answer decryption specialists. Perhaps they have something to say to you. Link to comment Share on other sites More sharing options...
MagWm Posted December 11, 2019 Report Share Posted December 11, 2019 is there any news for this ransomware? we have also been hit hard. Link to comment Share on other sites More sharing options...
GT500 Posted December 12, 2019 Report Share Posted December 12, 2019 17 hours ago, MagWm said: is there any news for this ransomware? we have also been hit hard. Our recommendation right now (especially for businesses) is to contact Coveware. They should be able to help reduce the ransom payment for you. Link to comment Share on other sites More sharing options...
Recommended Posts