# Data destruction

**URL:** <https://onehack.st/t/data-destruction/161861>\
**Category:** Discussion & Solutions\
**Tags:** solved\
**Created:** [November 9, 2020, 7:00am UTC](https://onehack.st/t/data-destruction/161861 "2020-11-09T07:00:12Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![zahoor\_islam](https://onehack.st/user_avatar/onehack.st/zahoor_islam/32/26756_2.png) [@zahoor\_islam](https://onehack.st/u/zahoor_islam)\
**Post date:** [November 9, 2020, 7:00am UTC](https://onehack.st/t/data-destruction/161861/1 "2020-11-09T07:00:13Z")

</div>

Hello onehack community.Today I installed a crack version of supercopier but it doesn’t work so i uninstall it.After that all of my file in the computer has an extension of .AGHO for example: myfile.AGHO  
and none of the file can’t be open.Please help me it has infected all of my file and no file is opening.All of my personal data will be destroyed.THanks in advance.

---

<div class="post-metadata">

**Author:** ![Dela](https://onehack.st/user_avatar/onehack.st/dela/32/76744_2.png) [@Dela](https://onehack.st/u/Dela)\
**Post date:** [November 9, 2020, 8:51am UTC](https://onehack.st/t/data-destruction/161861/2 "2020-11-09T08:51:48Z")

</div>

> [@zahoor\_islam](#):
>
> AGHO

Is it some variation of a Norton Ghost file i.e. ‘gho’?  
Failing that, there are utilities that can identify filetype through the file alone and without the file extension. Perhaps, on of those utilities might also be able to rename the file extension according to what it is actually defined as in the file itself?  
Have you tried to rename a file of which you know the type? Perhaps that you know that a certain file is a pdf even though it has the agho file extension. Can you rename that and open it or is the file encrypted?

---

<div class="post-metadata">

**Author:** ![zahoor\_islam](https://onehack.st/user_avatar/onehack.st/zahoor_islam/32/26756_2.png) [@zahoor\_islam](https://onehack.st/u/zahoor_islam)\
**Post date:** [November 9, 2020, 9:45am UTC](https://onehack.st/t/data-destruction/161861/3 "2020-11-09T09:45:43Z")

</div>

I can only rename the files and also remove the .AGHO extension but the files are still not opening.  
for example: I rename a pdf file (myfile.pdf.agho to myfile.pdf) but pdf reader is not opening it.It says file is corrupted.

---

<div class="post-metadata">

**Author:** ![Szymon\_Szymon](https://onehack.st/user_avatar/onehack.st/szymon_szymon/32/77507_2.png) [@Szymon\_Szymon](https://onehack.st/u/Szymon_Szymon)\
**Post date:** [November 9, 2020, 9:47am UTC](https://onehack.st/t/data-destruction/161861/4 "2020-11-09T09:47:16Z")

</div>

I have a question does all your files are corrupted ?

---

<div class="post-metadata">

**Author:** ![Fabian\_Fabian](https://onehack.st/user_avatar/onehack.st/fabian_fabian/32/77508_2.png) [@Fabian\_Fabian](https://onehack.st/u/Fabian_Fabian)\
**Post date:** [November 9, 2020, 9:56am UTC](https://onehack.st/t/data-destruction/161861/5 "2020-11-09T09:56:15Z")

</div>

yeah, same here. My brother’s laptop just got the same problem (.agho). I think it’s ransomware because there is readme file on almost every folder that tell us to buy some software app to decrypt those files, and the price is over $900.

---

<div class="post-metadata">

**Author:** ![zahoor\_islam](https://onehack.st/user_avatar/onehack.st/zahoor_islam/32/26756_2.png) [@zahoor\_islam](https://onehack.st/u/zahoor_islam)\
**Post date:** [November 9, 2020, 10:01am UTC](https://onehack.st/t/data-destruction/161861/6 "2020-11-09T10:01:41Z")

</div>

every folder has a file which says

ATTENTION!

Don’t worry, you can return all your files!  
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.  
The only method of recovering files is to purchase decrypt tool and unique key for you.  
This software will decrypt all your encrypted files.  
What guarantees you have?  
You can send one of your encrypted file from your PC and we decrypt it for free.  
But we can decrypt only 1 file for free. File must not contain valuable information.  
You can get and look video overview decrypt tool:

> **[WeTransfer | Send Large Files Fast](https://wetransfer.com/downloads/fb9b607d14153b89eaaf925348cba54820201108153639/fa1b2b)**
>
> The simple, quick and secure way to send your files around the world without an account. Share your files, photos, and videos today for free.

Price of private key and decrypt software is $980.  
Discount 50% available if you contact us first 72 hours, that’s price for you is $490.  
Please note that you’ll never restore your data without payment.  
Check your e-mail “Spam” or “Junk” folder if you don’t get answer more than 6 hours.

---

<div class="post-metadata">

**Author:** ![Greg\_Kind](https://onehack.st/user_avatar/onehack.st/greg_kind/32/19099_2.png) [@Greg\_Kind](https://onehack.st/u/Greg_Kind)\
**Post date:** [November 9, 2020, 10:17am UTC](https://onehack.st/t/data-destruction/161861/7 "2020-11-09T10:17:19Z")

</div>

dont pay a single penny  
Unfortunately u have to format your pc  
if no other choice left

---

<div class="post-metadata">

**Author:** ![Dela](https://onehack.st/user_avatar/onehack.st/dela/32/76744_2.png) [@Dela](https://onehack.st/u/Dela)\
**Post date:** [November 9, 2020, 10:19am UTC](https://onehack.st/t/data-destruction/161861/8 "2020-11-09T10:19:00Z")

</div>

You have my sympathies.  
That is awful.  
Hope that you manage to get through the difficulty ok!

---

<div class="post-metadata">

**Author:** ![zahoor\_islam](https://onehack.st/user_avatar/onehack.st/zahoor_islam/32/26756_2.png) [@zahoor\_islam](https://onehack.st/u/zahoor_islam)\
**Post date:** [November 9, 2020, 10:20am UTC](https://onehack.st/t/data-destruction/161861/9 "2020-11-09T10:20:33Z")

</div>

I have worked for 4 years on these files is there any way I can get them back.I dont have 450$ on me.

---

<div class="post-metadata">

**Author:** ![Jan\_Michael\_Nombres](https://onehack.st/user_avatar/onehack.st/jan_michael_nombres/32/75766_2.png) [@Jan\_Michael\_Nombres](https://onehack.st/u/Jan_Michael_Nombres)\
**Post date:** [November 9, 2020, 10:30am UTC](https://onehack.st/t/data-destruction/161861/10 "2020-11-09T10:30:19Z")

</div>

Same here happened in our office all our data NAS have been renamed to .agho extension, if you rename it to original file extenesion it will be garbage date or encrypted form

---

<div class="post-metadata">

**Author:** ![Jan\_Michael\_Nombres](https://onehack.st/user_avatar/onehack.st/jan_michael_nombres/32/75766_2.png) [@Jan\_Michael\_Nombres](https://onehack.st/u/Jan_Michael_Nombres)\
**Post date:** [November 9, 2020, 10:40am UTC](https://onehack.st/t/data-destruction/161861/11 "2020-11-09T10:40:57Z")

</div>

Do you install anything from your browser?, time and date modified of your folder and files.

---

<div class="post-metadata">

**Author:** ![zahoor\_islam](https://onehack.st/user_avatar/onehack.st/zahoor_islam/32/26756_2.png) [@zahoor\_islam](https://onehack.st/u/zahoor_islam)\
**Post date:** [November 9, 2020, 10:43am UTC](https://onehack.st/t/data-destruction/161861/12 "2020-11-09T10:43:18Z")

</div>

I downloaded a window app that doesn’t work.I uninstall it but everything was messed up.

---

<div class="post-metadata">

**Author:** ![Fsociety\_4life](https://onehack.st/user_avatar/onehack.st/fsociety_4life/32/49554_2.png) [@Fsociety\_4life](https://onehack.st/u/Fsociety_4life)\
**Post date:** [November 9, 2020, 11:05am UTC](https://onehack.st/t/data-destruction/161861/13 "2020-11-09T11:05:51Z")

</div>

Its called agho ransomware it encrypted all your files and you need to decrypt it please dont pay cause it ll support them and it mostly wont work take a look at this site it has all info about this ransomware it also has **decryption tool**. Decrypt more confidential files and backup in cloud or external device and format you whole device to clean up

[https://adware.guru/agho-ransomware-decrypt-files/](https://adware.guru/agho-ransomware-decrypt-files/)

---

<div class="post-metadata">

**Author:** ![Hafiz\_Abu\_Bakar](https://onehack.st/user_avatar/onehack.st/hafiz_abu_bakar/32/77514_2.png) [@Hafiz\_Abu\_Bakar](https://onehack.st/u/Hafiz_Abu_Bakar)\
**Post date:** [November 9, 2020, 11:29am UTC](https://onehack.st/t/data-destruction/161861/14 "2020-11-09T11:29:16Z")

</div>

Copy work file in D(pls not open many folder in D)..format local C..after format, rename file (juz delete “.AGHO”)

---

<div class="post-metadata">

**Author:** ![Supersri](https://onehack.st/user_avatar/onehack.st/supersri/32/18874_2.png) [@Supersri](https://onehack.st/u/Supersri)\
**Post date:** [November 9, 2020, 11:59am UTC](https://onehack.st/t/data-destruction/161861/15 "2020-11-09T11:59:37Z")

</div>

Do you have windows 10?  
Try restoring the files from a restore point

---

<div class="post-metadata">

**Author:** ![Leroy\_K\_Richards](https://onehack.st/user_avatar/onehack.st/leroy_k_richards/32/49311_2.png) [@Leroy\_K\_Richards](https://onehack.st/u/Leroy_K_Richards)\
**Post date:** [November 9, 2020, 12:06pm UTC](https://onehack.st/t/data-destruction/161861/16 "2020-11-09T12:06:56Z")

</div>

Brother very sad to hear. Try this if it works - [https://howtoremove.guide/agho-virus-file/](https://howtoremove.guide/agho-virus-file/) for removal but for decryption I have found nothing.

---

<div class="post-metadata">

**Author:** ![ARM\_Geometry\_Dash](https://onehack.st/user_avatar/onehack.st/arm_geometry_dash/32/27760_2.png) [@ARM\_Geometry\_Dash](https://onehack.st/u/ARM_Geometry_Dash)\
**Post date:** [November 9, 2020, 12:33pm UTC](https://onehack.st/t/data-destruction/161861/17 "2020-11-09T12:33:52Z")

</div>

> [@zahoor\_islam](#):
>
> .AGHO

[https://howtofix.guide/agho-virus-file/](https://howtofix.guide/agho-virus-file/)

---

<div class="post-metadata">

**Author:** ![Tirtha\_Kar](https://onehack.st/user_avatar/onehack.st/tirtha_kar/32/25895_2.png) [@Tirtha\_Kar](https://onehack.st/u/Tirtha_Kar)\
**Post date:** [November 9, 2020, 3:29pm UTC](https://onehack.st/t/data-destruction/161861/18 "2020-11-09T15:29:51Z")

</div>

It’s most probably a ransomware. I myself fall victim of it a few months ago. Each file of two drives of my pc had .Lime extension (for example: abc.jpg.Lime ) and couldn’t be opened. Then I searched the internet and became sure that it was a .Lime ransomware. Being afraid of it infecting the whole computer I immediately formatted the two drives that got infected. I was helpless and lost around 250 GB of data in the process. I feel extremely sorry for you but most likely you have to accept the consequences. Next time please turn on ‘controlled folder access’ settings in the windows defender. This settings was specially designed for ransomware protection.

---

<div class="post-metadata">

**Author:** ![Tirtha\_Kar](https://onehack.st/user_avatar/onehack.st/tirtha_kar/32/25895_2.png) [@Tirtha\_Kar](https://onehack.st/u/Tirtha_Kar)\
**Post date:** [November 9, 2020, 3:38pm UTC](https://onehack.st/t/data-destruction/161861/19 "2020-11-09T15:38:06Z")

</div>

You can also check this.

> [@Ransomware Gangs That Steal Your Data Don't Always Delete It](https://onehack.st/t/ransomware-gangs-that-steal-your-data-dont-always-delete-it/161639):
>
> Ransomware gangs that steal a company’s data and then get paid a ransom fee to delete it [don’t always follow through on their promise](https://www.zdnet.com/article/ransomware-gangs-that-steal-your-data-dont-always-delete-it/). From a report: The number of cases where something like this has happened has increased, according to a report published by Coveware this week and according to several incidents shared by security researchers with ZDNet researchers over the past few months. These incidents take place only for a certain category of ransomware attacks – namely those carr…

---

<div class="post-metadata">

**Author:** ![zahoor\_islam](https://onehack.st/user_avatar/onehack.st/zahoor_islam/32/26756_2.png) [@zahoor\_islam](https://onehack.st/u/zahoor_islam)\
**Post date:** [November 10, 2020, 7:42am UTC](https://onehack.st/t/data-destruction/161861/21 "2020-11-10T07:42:25Z")

</div>

Nothing works I have to format my dirve and I have lost 660 GB of data.

[Next page](https://onehack.st/t/data-destruction/161861.md?page=2)
