1
action steps: 1. If your computer is part of a network, remove the infected system from the network. 2. If you wish, you can create a copy of your disk or the impacted files for analysis later on, which may be needed for decryption of files. 3. If you have a healthy system restore point, see if you can go back and see if that works for you. 4. If you have recent backups of your data, even better. Format and clean reinstall Windows and restore your backed up data to make a fresh start. 5. Boot into Safe Mode and run your antivirus software deep-scan and hope that it is able to disinfect your computer. Chances are it won’t, but no harm in trying. 6. Next, identify the ransomware which has infected your computer. For this, you may use a free online service called ID Ransomware. 7. If you are able to identify the ransomware, check if a ransomware decrypt tool is available for your type of ransomware. Then take the help of one of these ransomware decryptor tools which are presently available. 8. If the ransomware totally blocked access to your computer or even restricted access to select important functions, use Kaspersky WindowsUnlocker as it can clean up a ransomware infected Registry, and gives you access back. 9. While it is easy to recommend not paying the cyber- criminals, if your data is critical and you have no choice but to have access to it back, paying the ransom is the only option you have. Many have done this, unfortunately – although they do not like to acknowledge this publicly. But this is the hard fact of life. So you or your organization will have to make the business decision as to whether or not to pay the ransom. Report the security incident to the FBI Cyber Law Enforcement: FBI San Antonio Office 5740 University Heights Blvd., San Antonio, TX 78249 Phone: (210) 225-6741 Fax: (210) 650-6153 10. Report ransomware incident on Internet Complaint Center at www.ic3.gov website http://www.thewindowsclub.com/ what to do after ransomware attack In case you find that your computer has been locked by Ransomware, your Network Administrator should take the Action Steps listed below. If you do not have a Network Administrator, Jefferson Bank may provide you with a list of Companies that perform these services. JeffersonBank.com Copyright © US.Norton. All rights reserved.
