Enigma ransomware affected file
File type: Ransomware encrypted file
Files with the .1txt suffix are typically encrypted and renamed files, including archives, affected by the Enigma ransomware.
The extension marks affected files; it is not a normal document or archive format.
File type category:
Ransomware encrypted file
Date updated: October 6, 2026
Enigma ransomware is malware that encrypts users' documents and other personal files, then appends the .1txt suffix when renaming them. In late October 2016, a variant of the ransomware began using this suffix.
The ransomware demands a ransom in exchange for a decryption key.
The .1txt suffix is therefore an indicator of a ransomware infection rather than a file format with its own software support.
A .1txt file cannot normally be opened or read with a standard application. Renaming the file or changing its suffix does not decrypt its contents.
As of October 2016, no decryptor was known to be available for this variant. Recovery requires a decryptor that supports the particular Enigma ransomware variant, if one is available, or restoration of the original file from a clean backup. The suffix alone does not identify a program that can open the file.
Encrypted .1txt files cannot be meaningfully converted to another format. Conversion is possible only after the files have been successfully decrypted or restored from a backup.
Once recovered, each file can be opened and exported with the application associated with its original format.
Language