diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index bc0ea7e..c5a57b4 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -11436,7 +11436,8 @@
         ],
         "ransomnotes": [
           "https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/november/23/DsiUA0LXgAAoqkd[1].jpg",
-          "https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/november/23/DsuMFrZW0AIIUXs[1].jpg"
+          "https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2018/november/23/DsuMFrZW0AIIUXs[1].jpg",
+          "!=How_recovery_files=!.html"
         ],
         "refs": [
           "https://twitter.com/petrovic082/status/1065223932637315074",