diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index 24a46d2..f1cb9f2 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -1175,7 +1175,6 @@
         ],
         "ransomnotes": [
           "HOW_OPEN_FILES.html",
-          "https://1.bp.blogspot.com/-w6lxK0qHj8A/WIO_iAngUzI/AAAAAAAADTk/dLGlrwwOh508AlG2ojLRszpUxL0tHrtSQCLcB/s1600/note-html.jpg",
           "https://1.bp.blogspot.com/-w6lxK0qHj8A/WIO_iAngUzI/AAAAAAAADTk/dLGlrwwOh508AlG2ojLRszpUxL0tHrtSQCLcB/s1600/note-html.jpg"
         ],
         "encryption": "AES",
@@ -1673,8 +1672,6 @@
         ],
         "encryption": "AES-256+RSA or RC4",
         "extensions": [
-          ".decrypt2017",
-          ".hnumkhotep",
           ".badnews",
           ".globe",
           ".[random].bit",
@@ -2031,7 +2028,6 @@
           "https://twitter.com/demonslay335/status/813064189719805952"
         ],
         "ransomnotes": [
-          "More.html",
           "https://3.bp.blogspot.com/-hApL-ObdWsk/WGAYUyCzPcI/AAAAAAAACyg/NuL26zNgRGcLnnF2BwgOEn3AYMgVu3gQACLcB/s1600/More-note.png",
           "More.html"
         ],