Help me identify possible Amnesia2 Infection.

[imperia 0]

Hello,

A friend of mine got his PC infected with ransomware which is identified by https://id-ransomware.malwarehunterteam.com/ as Amnesia2.

However the decryptor was able to decrypt one .pdf file but the result was corrupted file and I think that this may not be Amnesia2.

Can you please help me identify the infection. Antivirus found nothing. I guess Windows Defender removed the file before I went to help.

Defender removed file with infection: Skeeyah.

File extension of encrypted files is @decrypt_files2017

 

Thanks

 

HOW TO RECOVER FILES.TXT

GC ORDER [email protected]_files2017

Bausch (1)[email protected]_files2017