ANONTSUGUMI Ransomware 🔐 (.ANONTSUGUMI File) — Removal Guide

The Anontsugumi virus falls within the ransomware type of malicious agent. A harmful program of such sort encrypts all user’s data on the PC (photos, documents, excel tables, audio files, videos, etc) and adds its own extension to every file, creating the README.txt text files in each folder which contains the encrypted files.

Anontsugumi virus: what is known so far?

Anontsugumi appends its own .anontsugumi extension to every file’s name. For instance, a file named “photo.jpg” will be turned into “photo.jpg.anontsugumi”. Likewise, the Excel sheet with the name “table.xlsx” will become “table.xlsx.anontsugumi”, and so on.

In every folder that contains the encrypted files, a README.txt file will be created. It is a ransom money note. Therein you can find information about the ways of paying the ransom and some other remarks. The ransom note usually contains instructions on how to buy the decryption tool from the racketeers. You can get this decryptor after contacting Telegram contact menitoned in the note. That is pretty much the scheme of the crime.

Anontsugumi Summary:

The README.txt document accompanying the Anontsugumi malware states the following:

All of your files have been encrypted
Your computer was infected with a ransomware virus. Your files have been encrypted and you won\'t
be able to decrypt them without our help.

What can I do to get your files back?
You can buy our special decryption software, this software will allow you to recover all of your data and remove the cooties from your computer.

The price for the software is any donation!!

Payment can be made in Bitcoin only.

Purchasing Bitcoin varies from country to country, you are best advised to do a quick google search
yourself to find out how to buy it.

Contact me because im bored.
Telegram: @anontsugumi


Payment information Amount: ANY BTC
Bitcoin Address: 17CqMQFeuB3NTzJ2X28tfRmWaPyPQgvoHV

In the picture below, you can see what a folder with files encrypted by the Anontsugumi looks like. Each filename has the “.anontsugumi” extension appended to it.

How did my computer get infected with Anontsugumi ransomware?

There are many possible ways of ransomware infiltration.

Nowadays, there are three most exploited methods for tamperers to have ransomware planted in your digital environment. These are email spam, Trojan injection and peer file transfer.

• Another thing the hackers might try is a Trojan horse scheme. A Trojan is an object that infiltrates into your computer pretending to be something legal. Imagine, you download an installer of some program you need or an update for some software. But what is unboxed reveals itself a harmful program that compromises your data. Since the installation wizard can have any name and any icon, you have to make sure that you can trust the source of the files you’re downloading. The optimal thing is to trust the software companies’ official websites.
• As for the peer-to-peer file transfer protocols like torrent trackers or eMule, the danger is that they are even more trust-based than the rest of the Internet. You can never know what you download until you get it. Our suggestion is that you use trustworthy resources. Also, it is a good idea to scan the folder containing the downloaded files with the anti-malware utility as soon as the downloading is done.

How do I get rid of ransomware?

It is crucial to note that besides encrypting your files, the Anontsugumi virus will probably install Vidar Stealer on your computer to seize your credentials to various accounts (including cryptocurrency wallets). The mentioned spyware can extract your logins and passwords from your browser’s auto-filling cardfile.

How to avoid ransomware attack?

Anontsugumi ransomware doesn’t have a endless power, neither does any similar malware.

You can defend your PC from its injection taking several easy steps:

• Ignore any emails from unknown mailboxes with unknown addresses, or with content that has nothing to do with something you are waiting for (how can you win in a money prize draw without participating in it?). In case the email subject is likely something you are waiting for, check all elements of the suspicious email carefully. A hoax letter will surely contain mistakes.
• Never use cracked or untrusted programs. Trojan viruses are often spreaded as a part of cracked products, most likely under the guise of “patch” which prevents the license check. But dubious programs are difficult to distinguish from reliable ones, as trojans may also have the functionality you need. Try searching for information on this software product on the anti-malware forums, but the optimal solution is not to use such software.

FAQ

🤔 How can I open “.anontsugumi” files?Is it possible to open“.anontsugumi” files?

Negative. That is why ransomware is so frustrating. Until you decode the “.anontsugumi” files you will not be able to access them.

🤔 I really need to decrypt those “.anontsugumi” files ASAP. How can I do that?

Hopefully, you have made a copy of those important files. If not, there is still a function of System Restore but it needs a Restore Point to be previously saved. There are other ways to beat ransomware, but they take time.

🤔 What actions should I take if the Anontsugumi virus has blocked my PC and I can’t get the activation code.

🤔 What could help the situation right now?

Many of the blocked files might still be at your disposal

• If you exchanged your critical files via email, you could still download them from your online mailbox.
• You may have shared images or videos with your friends or family members. Just ask them to send those pictures back to you.
• If you have initially got any of your files from the Web, you can try doing it again.
• Your messengers, social networks pages, and cloud disks might have all those files too.
• Maybe you still have the needed files on your old computer, a portable device, mobile, flash memory, etc.

USEFUL TIP: You can employ file recovery utilities¹ to retrieve your lost information since ransomware encrypts the copies of your files, removing the authentic ones. In the tutorial below, you can learn how to use PhotoRec for such a restoration, but be advised: you can do it only after you remove the virus with an anti-malware program.

1. Here’s the list of Top 10 Data Recovery Software Of 2023.