How to recover
Files Using Amnesia2 Decrypter
from Windows

I’ve just downloaded Amnesia2 Decrypter. Could you explain how to use it?

Amnesia2 Decrypter has just been released a few days ago, making the lives of those infected much less miserable since they can now recover their files absolutely free. The experts have updated the old Amnesia decryptor’s code to search and decrypt the new extensions .01 and .02 that the second virus variant appends to the encrypted files. The decryption software has been developed by a reputable cyber security company Emsisoft. The group of Emsisoft researchers has already achieved major success decrypting a bunch of other ransomware including Cry128, CryptON, Globe3 and many more. As for the Amnesia2 Decrypter, at the moment of writing, it has already been downloaded 692 times, and this number only grows with each day. If you want to recover your files, scroll down below where you will find the decryptor's quick download link as well as a brief guide explaining how to use it. If you are not sure if you are infected with Amnesia2, we’ve also prepared a short reminder of the typical virus characteristics below.

Amnesia2 is a follow-up version of the Amnesia ransomware which has been released soon after the original virus was decrypted. The hackers hoped to achieve better success by introducing some few changes to this new virus variant. The extortionists have added .01 and .02 extensions to mark encrypted files and have programmed the virus to replace the original filenames with strings of random characters. This makes it even more difficult to recover files when you don’t know what you are recovering. The crooks have not forgotten the ransom note as well. This document has shifted from a .txt file to .html and have been renamed as RECOVER-FILES.HTML. The document contains the following:

Your files are Encrypted!
For data recovery needs decryptor.
To buy the decryptor, you must pay the cost of 0.5 Bitcoin.
[“Buy Decryptor” button]
Free decryption as guarantee.
Before paying you can send us 1 file for free decryption.
To send a message or file use this form:

You can tell that the extortionists have improved and become more professional as they are now giving the victims and insurance by allowing to decrypt one selected file. Nevertheless, collaboration with the criminals can be dangerous and in this case, absolutely unnecessary as you can decrypt your files for free following the guidelines below.

Step 1: Get ready for the decryption

For the file decryption to pass successfully, you must remove every piece of the malicious Amnesia2 files from your computer. If you fail to do so, the decryption will be just a waste of time: the virus will perform a secondary encryption, and you will have to go through the procedure all over again. You may rely on security software like [rev id=”Reimage”] to clean up your computer. It is also recommended to create a backup copy of the encrypted data just to be sure you won’t lose any of your important documents in case something goes wrong during the decryption.

Step 2: How to use Amnesia2 Decrypter?

The main principle on which Emsisoft decrypters work is focused on analyzing two versions of the same file. One version of the file should be a healthy, while the second one affected by the virus. The software will compare the two versions together and derive a private key which will later be applied for the recovery of the rest of the encrypted files. So, the first step of the Amnesia2 should be finding the files. Then, you can finally download the Amnesia2 Decrypter.

1. When you download the decrypter launch it and drop the selected file pair on the indicated window.
   The key recovery procedure will commence immediately, so you will have to wait for the “Decryption key found” notification to show up. OK to confirm.
2. Click OK again to agree with the “Licence terms.”
3. In the new Decrypter window, you will be asked to pick the files, folders of whole computer partitions that you want to decrypt. We suggest starting small and picking one or a couple of less important files for a test run.
4. When you are happy with your selections, click the “Decrypt” button. This will start the data recovery process.

If after completing these steps your selected files are decrypted, you can go through the same process again and recover the rest of your system.