What to do after Ransomware Attack on your system?

First of all disconnect your computer from internet after ransomware attack.

If your computer has an external hard disk installed, remove it immediately.

[{"selector":"#anim-7f3f9c36-6c7e-4697-a4eb-565c12cae3e2","keyframes":{"transform":["translate3d(-113.99417%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-f7ef577e-7a76-4b8c-b1a9-236782f11807","keyframes":{"opacity":[0,1]},"delay":0,"duration":1600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-ea31804f-c859-4023-8778-03996d8c1d8e","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":1600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]

In the search bar at the bottom, search for Virus & threat protection and turn on Real Time Protection.

[{"selector":"#anim-c9af74b7-3ac5-4f39-b29f-5a5881aa3048","keyframes":{"transform":["translate3d(113.75000%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-61bae870-a5ad-48d3-965a-8e3686c0647f","keyframes":{"opacity":[0,1]},"delay":0,"duration":1600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-4e77c633-42b0-4c46-8529-58d0ee3209cc","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":1600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]

Open Task Manager and go to Details and right click on whatever unwanted software is running and end task.

[{"selector":"#anim-cf163891-8834-478c-9d6b-95b53ae25f4b","keyframes":{"opacity":[0,1]},"delay":0,"duration":1600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-11c1a2f1-f598-4b3d-bc84-1e17f2540822","keyframes":{"transform":["translate3d(0px, -129.03092%, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}]

Go to the startup of Task Manager and disable all unwanted software by right-clicking on it.

[{"selector":"#anim-f8f59b99-57c9-4399-b416-13c27f54ab06","keyframes":{"opacity":[0,1]},"delay":0,"duration":1600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-5304c22b-ffec-497f-b27b-d681650920f4","keyframes":{"transform":["translate3d(0px, 287.37819%, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}]

Never format windows in case of windows ransomware attack. If you want to format, copy the data somewhere.

[{"selector":"#anim-7e9496f6-ab90-47fd-8c14-c11129bf7129","keyframes":{"opacity":[0,1]},"delay":0,"duration":1600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-895c8b89-2670-494b-a777-0fdffaac3af5","keyframes":{"transform":["translate3d(113.75000%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}]

Do not pay to the hacker, because 99 out of 100 hackers do not return the data, but once paid, they demand money again.

[{"selector":"#anim-40e62198-008f-4115-bdd3-467be3b91833","keyframes":{"opacity":[0,1]},"delay":0,"duration":1600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-b637c886-707f-4cac-8b6c-f06c7c63d55b","keyframes":{"transform":["translate3d(0px, -129.03092%, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}]

You can talk to Mohit Mehta to get your data decrypted, it can decrypt some types of data.

[{"selector":"#anim-0823057a-8992-4714-ab17-e69f218f0ddb","keyframes":{"opacity":[0,1]},"delay":0,"duration":1600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-e35bf80c-f307-4129-ac55-968f48ee1ca6","keyframes":{"transform":["translate3d(-115.00001%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] CHAT WITH MOHIT MEHTA