Files are encrypted, or a ransom note is on the screen

Stop working on that machine. Essential, from RM4,500 a month, includes a restore test so there is a copy that can be opened. If the server is down right now, use the emergency page.

Leave the machine as it is

Unplug the network cable from that machine so it cannot reach the others.

Do not restart it

Another power cycle can finish what the note started.

Do not plug in the backup drive

If that disk is clean, connecting it now can encrypt the only copy you have.

Do not pay from the note

Paying does not give you the files back. Talk to us before any transfer.