# How to remove or fix ransomware

**URL:** <https://onehack.st/t/how-to-remove-or-fix-ransomware/183847>\
**Category:** Discussion & Solutions\
**Tags:** solved\
**Created:** [May 18, 2021, 2:45pm UTC](https://onehack.st/t/how-to-remove-or-fix-ransomware/183847 "2021-05-18T14:45:22Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Najmuddin](https://onehack.st/user_avatar/onehack.st/najmuddin/32/87781_2.png) [@Najmuddin](https://onehack.st/u/Najmuddin)\
**Post date:** [May 18, 2021, 2:45pm UTC](https://onehack.st/t/how-to-remove-or-fix-ransomware/183847/1 "2021-05-18T14:45:22Z")

</div>

How to delete this Igvm File Virus Ransomware

**What does Igvm Virus want?**

Igvm Ransomware is a dangerous threat and it is only interested in your money. The note left by this infection on your computer clearly says that you need to pay to get your files back. There is no discussion about the payment, no negotiation only the demand and time limit. Hackers claim to give you decryption key when you pat the ransom amount but there is no proof that they will keep their promise. The ransom note left by .Igvm file virus contains following text :–

ATTENTION! Don’t worry, you can return all your files! All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key. The only method of recovering files is to purchase decrypt tool and unique key for you. This software will decrypt all your encrypted files. What guarantees you have? You can send one of your encrypted file from your PC and we decrypt it for free. But we can decrypt only 1 file for free. File must not contain valuable information. You can get and look video overview decrypt tool: hxxps://we.tl/t-Oc0xgfzC7q Price of private key and decrypt software is $980. Discount 50% available if you contact us first 72 hours, that’s price for you is $490. Please note that you’ll never restore your data without payment. Check your e-mail “Spam” or “Junk” folder if you don’t get answer more than 6 hours. To get this software you need write on our e-mail: helpmanager@firemail.cc Reserve e-mail address to contact us: helpmanager@iran.ir Your personal ID: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Thanks Onehackers

---

<div class="post-metadata">

**Author:** ![Techtanic](https://onehack.st/user_avatar/onehack.st/techtanic/32/92090_2.png) [@Techtanic](https://onehack.st/u/Techtanic)\
**Post date:** [May 18, 2021, 3:24pm UTC](https://onehack.st/t/how-to-remove-or-fix-ransomware/183847/2 "2021-05-18T15:24:38Z")

</div>

I hope this helps [Emsisoft Decryptor for STOP Djvu - Emsisoft: Free Ransomware Decryption Tools](https://www.emsisoft.com/ransomware-decryption-tools/stop-djvu)

If it does work do say. Also can you say the application or software that cause it. (if possible)

---

<div class="post-metadata">

**Author:** ![Najmuddin](https://onehack.st/user_avatar/onehack.st/najmuddin/32/87781_2.png) [@Najmuddin](https://onehack.st/u/Najmuddin)\
**Post date:** [May 19, 2021, 6:15am UTC](https://onehack.st/t/how-to-remove-or-fix-ransomware/183847/3 "2021-05-19T06:15:46Z")

</div>

**HelloTechtanic** ,  
the strongest scenario tells it’s KMS Matrix or Microsoft toolkit because i was trying to install a cracked version of microsoft office then this happend. 🤕

---

<div class="post-metadata">

**Author:** ![Techtanic](https://onehack.st/user_avatar/onehack.st/techtanic/32/92090_2.png) [@Techtanic](https://onehack.st/u/Techtanic)\
**Post date:** [May 19, 2021, 8:53am UTC](https://onehack.st/t/how-to-remove-or-fix-ransomware/183847/4 "2021-05-19T08:53:25Z")

</div>

But from where did you get it the website?

---

<div class="post-metadata">

**Author:** ![maamiradina](https://onehack.st/user_avatar/onehack.st/maamiradina/32/26153_2.png) [@maamiradina](https://onehack.st/u/maamiradina)\
**Post date:** [May 19, 2021, 11:21am UTC](https://onehack.st/t/how-to-remove-or-fix-ransomware/183847/5 "2021-05-19T11:21:37Z")

</div>

This is for older versions of virus.igvm extensions is new kind of virus. I am a victim too.

---

<div class="post-metadata">

**Author:** ![maamiradina](https://onehack.st/user_avatar/onehack.st/maamiradina/32/26153_2.png) [@maamiradina](https://onehack.st/u/maamiradina)\
**Post date:** [May 19, 2021, 11:22am UTC](https://onehack.st/t/how-to-remove-or-fix-ransomware/183847/6 "2021-05-19T11:22:32Z")

</div>

I downloaded a discord attachment from a link on the site when i opened that zip file and clicked on exe file then this was happened

---

<div class="post-metadata">

**Author:** ![Najmuddin](https://onehack.st/user_avatar/onehack.st/najmuddin/32/87781_2.png) [@Najmuddin](https://onehack.st/u/Najmuddin)\
**Post date:** [May 19, 2021, 11:36am UTC](https://onehack.st/t/how-to-remove-or-fix-ransomware/183847/7 "2021-05-19T11:36:16Z")

</div>

Same. I Think generally we lost our data. @maamiradina  
the method That @Techtanic shared is not working. (the sofware won’t run) at least on my computer

---

<div class="post-metadata">

**Author:** ![Techtanic](https://onehack.st/user_avatar/onehack.st/techtanic/32/92090_2.png) [@Techtanic](https://onehack.st/u/Techtanic)\
**Post date:** [May 19, 2021, 2:16pm UTC](https://onehack.st/t/how-to-remove-or-fix-ransomware/183847/8 "2021-05-19T14:16:42Z")

</div>

Again I have no idea if it will work or but this article is new [How to remove Igvm Ransomware - virus removal steps (pcrisk.com)](https://www.pcrisk.com/removal-guides/20831-igvm-ransomware)
