Research on .AHGIDC_LeChiffre Virus

A hot ransomware called .AHGIDC_LeChiffre Virus have broken out this week and now is still spreading quickly. .AHGIDC_LeChiffre Virus now is distributed through spam email attachments. Most of users downloaded and opened the malicious attached files and then all the files are encrypted with a inaccessible extension. It drops a ransom note to inform the users that their files are encrypted with RAS or AES encryption and they have to buy decryptor with bitcoins. Here is one of the warnings:

Don’t Pay Money to Author of .AHGIDC_LeChiffre Virus

It is common that users are scammed by ransomware maker. In most of cases, users pay lots of money to buy the so-called decryptor but the hacker just take the money and disappear. We understand that the encrypted files are very important to you, but it is not good to make a trade with hacker, who are criminal. And there is another risk, that is the hacker will have chance to hack your bank account if you send money to them. Therefore, never contact the hacker of .AHGIDC_LeChiffre Virus and never pay the ransom fees. There are lots of data decryption company and software and you should try some safe solutions. Our lab worked out a removal method towards .AHGIDC_LeChiffre Virus, you can try your luck here:

Infected by Ransomware – What Should You Do?

[NOTE – The following guide is only written to introduce you a possible way that has the best possibility to restore files. We cannot promise that the recommended tools can 100% restore your files. You can decide to try them or not at you will. If a 100% proven method to recover the encrypted files is found we will update this guide!]

Firstly – Confirm Security Status of Infected PC

Secondly – Try Legitimate File Decryptors


First Section – Confirm Security Status of Infected PC

Before Trying Any File Decryptors , it’s necessary to check your infected PC and confirm its security status. Because Ransomware such as .AHGIDC_LeChiffre Virus may bring more risks to infected PC besides the file encryption issue. To do so, we Recommend downloading WiperSoft Anti-malware to scan PC and check if it detects any potential risk or threat.

WiperSoft is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware. It may cut down your checking time from hours to mins.

– Download WiperSoft Anti-Malware:

Download WiperSoft AntiMalware

( To understand WiperSoft’s policies and practices, please visit EULA, and Privacy Policy.Learn more about WiperSoft and its key features. If you wish to uninstall WiperSoft, follow the steps to uninstall instructions. WiperSoft scanner is free. Once it detects a virus or malware, you’ll need to purchase its full version to remove the threat.)

– Once downloaded and installed, click SCAN NOW to detect unsafe items or computer threats like .AHGIDC_LeChiffre Virus.

– Once it completes the scan, click REMOVE THREATS to clean up your machine:

  • If you want WiperSoft help you clean up the detected items, you will need to purchase its full version.
  • Alternatively, if you do not want to register the full version, you can try to manually find and delete the detected files one by one according to the scan results. BUT Please Note That, this process may take hours and you may damage PC if you do something wrong. So If you decide to do it manually, be carefully! You have to take all the risks at your own.


Second Section – Try Legitimate File Decryptors

Keep in mind, paying ransom to hacker is the worst solution for decrypting your files. Don’t trust these cyber criminal. You may just fund them to create more ransomware.

The right thing you need to do is to find legitimate decryption tool from popular tech companies. Here are some famous data recovery and decryption tools you can try:

[NOTE – We can only recommend the possible file decryptors for you, but we cannot promise that these tools can 100% decrypt your files. You can decide to try them or not at you will. If a 100% proven method to recover the encrypted files is found we will update this guide]

Data Recovery Pro (Not Free)

Download Data Recovery Pro To Recover Damaged Files

(To read about Data Recovery Pro’s policies and practices, please visit EULA, and Privacy Policy. Learn more about Data Recovery Pro and its key features on it site. )

Trend Micro Ransomware File Decryptor (Free) Go to Page of Trend Micro and follow its guide to download Trend Micro Ransomware File Decryptor to see it can save back your files.
Avast Free Ransomware Decryption Tools (Free) Go to page of Avast Free ransomware decryption tools to download decryption tools for ransomware similar to .AHGIDC_LeChiffre Virus.
EmsiSoft Decrypter (Free) Go to Page of EmsiSoft Decrypter to get free decrypters for over 40 ransomware.
Kaspersky Free Ransomware Decryptor (Free) Go to Page of Kaspersky Free Ransomware Decryptor to find decryptor for your files.