Dear malware experts, please help me to fight with this virus!
Yesterday I opened a suspicious email attachment that was called EMAIL_4353839373343_recipient.zip. I found Word file there, and opened it. Sadly, nothing was here. I simply shrug and walked away from my computer to have a lunch. When I came back, I discovered that my files became inaccessible (I couldn’t open them anymore) and all of them had .sage extensions. I mean, all files have double file extensions now – the original one and .sage afterwards. I also found ! Recovery_ .html file on my desktop. I opened it and followed instructions, installed Tor browser, went to a particular page, and discovered that I need to pay $2000 to someone in order to get my files back. What the hell is going on???
Files with .sage extensions now, cannot be opened too, HELP ME
Bectich, | Sage 2.0 ransomware virus |
Ask a question
Community Answers
Your opinion regarding Files with .sage extensions now, cannot be opened too, HELP ME
You must be logged in to post a comment.
The information that you have provided clearly indicates that your files have been encrypted with Sage 2.0 ransomware. This malicious program spreads via deceptive mail spam campaigns that deliver infectious .zip archives with Word or JavaScript file in it. The virus encrypts all data with unique encryption and also appends .sage file extensions to each encrypted file. Recovery_ .html file is the so-called ransom note, which the virus leaves on the computer screen to provide the victim with details about the infection. The ransom note instructs how to access personal payment website, which suggests buying Sage 2.0 decryptor. According to cyber criminals, only this tool can decrypt victim's files. However, we highly recommend victims not to pay the ransom because it sometimes paying isn't the solution - we know many cases when cybercriminals just took victim's money and never provided the decryption tool. Even worse, some criminals are so audacious that they ask for more money.
You can restore your data from backups, but if you do not have them, we suggest trying data recovery methods provided in this article: Sage 2.0 ransomware virus. How to Remove? (Uninstall Guide & Data Recovery Tips).
Do not forget to remove Sage 2.0 virus with FortectIntego or Malwarebytes program before you take any actions regarding data recovery!
2-Spyware team.