If your files have been renamed, won’t open, and there’s a ransom note on screen, act quickly but calmly. What you do in the first hour makes a big difference to what can be recovered.
Do this now
- Unplug the network cable and turn off Wi-Fi on the affected machines.
- Don’t switch them off, wipe them or run clean-up tools yet.
- Don’t contact the attackers or pay the ransom.
- Call us.
How we help
- Contain the attack and find which machines are affected
- Identify the ransomware family and check for known decryptors
- Recover from backups, cloud version history and NAS snapshots
- Recover unencrypted data from affected drives where possible
- Rebuild affected machines cleanly
- Close the gap that let the attackers in, and set up backups that ransomware can’t reach
Questions we get asked
Should we pay the ransom?
We advise against it. Payment doesn’t guarantee your files back, and it marks you as a business that pays.
Can you work on site?
Yes, for businesses we can come to you, or work remotely where that is safe.
Bring it in or call us
Walk in to The Willows, Unit 1, 80 Willow Walk, London SE1 5SY, Mon to Sat, 9am to 6pm. We look at the fault and give you a price before any work starts.