What should I do if my computer has received ransomware?

What should I do if my computer has received ransomware?

Aimed at:  Edinburgh Napier’s staff & students

Kill the power immediately

The moment you think something is wrong, kill the power to your machine by unplugging it, and call the IS Service Desk on ext. 3000.

Power image

The only way you can stop these infections from continuing is if they don’t have power. Once they are running, they will continue to encrypt all accessible documents, including those on network shares, until no more can be found.

If you believe your computer is infected with ransomware, the IS Support team will remove the hard drive from the computer, scan it, and remove any infections before returning power.

If the drive is infected and you power it back on, the ransomware will continue to encrypt documents.

Contact the IS Service Desk

Telephone ext. 3000 (0131 455 3000 externally).

The IT Support team will disconnect the infected system from the network and remove the threat, as well as restoring any impacted files from a known good backup.

Restoration of your files from a backup is the fastest way to regain access to your data.

IT Support Logo
Do not pay the ransom!

Paying the ransom may seem like the only option at the time, but it is only encouraging and funding these attackers. Even after paying the ransom, there are no guarantees that you will actually regain access to your files.   

Remember that these are the same aggressors that are holding your files hostage in the first place. Paying the ransom can actually increase the likelyhood that you will be directly targeted for additional extortion attempts.


There are no attachments for this article.
Related Articles RSS Feed
How can I recognise a phishing email?
Viewed 29714 times since Fri, Mar 11, 2016
How do I protect myself when using Social Media?
Viewed 19074 times since Thu, May 19, 2016
What are Extortion Emails?
Viewed 5103 times since Wed, Jan 23, 2019
What is the Password Manager
Viewed 22327 times since Thu, Mar 3, 2016
How do I enrol for the Password Manager?
Viewed 26149 times since Thu, Mar 3, 2016
How do I know if my computer has a virus?
Viewed 19632 times since Tue, Apr 12, 2016
What is spyware?
Viewed 23615 times since Tue, Apr 12, 2016
How do I avoid ransomware?
Viewed 19945 times since Wed, Apr 13, 2016
What is a phishing email?
Viewed 36426 times since Fri, Mar 11, 2016
How do I keep myself safe when browsing the internet?
Viewed 17834 times since Mon, Jan 30, 2017