You must isolate infected systems to prevent the ransomware from spreading to other devices or networks. Disconnect affected devices from the web and other devices, but avoid rebooting or shutting them down.
Use an up-to-date antivirus or antimalware program to scan affected devices. This will help you identify the nature of the ransomware and its specific characteristics.
It is essential to determine which documents, equipment or devices have been affected and which variant of ransomware is involved.
Keep a record of everything connected with the attack, such as the ransom note, suspicious emails or attached files. This information can be crucial for subsequent investigations.
If you have recent, reliable backups, consider restoring them to secure devices. Make sure these backups are intact and compatible with the destination devices. It goes without saying, but don't restore contaminated backups...
If your backups are incomplete or missing, it’s a good idea to consult a data recovery specialist like SOS Ransomware. We offer efficient support, while ensuring the discretion of your information.
Adopt the right reflexes...
We have over 20 years’ experience in data recovery. Call on the French leader, our expertise enables us to provide you with a top-level response.
The first steps to take in the face of ransomware
All the steps to take after an infection
Restoring data following a ransomware attack
Is your business at a standstill, your IT system paralysed?
Contain the infection by isolating your machines from the Internet
Don't try to contact your attackers, don't pay the ransom
Don't wait, our teams know how to act
In Paris (8) and Roanne, near Lyon (42). SOS Ransomware is a specialist service of Recoveo, France’s No. 1 data recovery company.
Emergency : (+33) 1 84 60 41 12 (24/7)
WhatsApp : 07 74 77 62 57
Paris : (+33) 1 84 16 57 42
Lyon : (+33) 4 77 71 75 61
Paris : 36 rue Laborde 75008 Paris 8
Lyon : 28 levée du Renaison 42300 Roanne