Suspected ransomware
A ransom message, or files suddenly renamed, encrypted or unreadable.
Suspected ransomware: act now
Ransomware spreads quickly. These steps focus on containing it and protecting your backups. They won’t fix the incident, so you’ll need qualified help.
Safety warning: Disconnect first
If you suspect ransomware is active, unplug this device’s network cable and turn off its Wi-Fi now, then continue.