Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PC×
Skip to content
World desk3 min

What to Do If Your Computer or Files Are Encrypted by Ransomware

If ransomware encrypts your files, disconnect the affected computer from networks, preserve the ransom note, and check for a clean backup or a verified free decryptor. Payment and malware removal do not guarantee file recovery.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Disconnect the affected computer from Wi-Fi and wired networks first to limit ransomware from spreading. Save the ransom note, avoid using the computer for sensitive activity, and work out whether you have a clean backup or whether a free decryptor exists for the specific ransomware. Do not assume that paying or removing the malware will restore encrypted files.

What to do immediately

  1. Disconnect the affected computer from networks. Turn off Wi-Fi and unplug its Ethernet cable. If more than one device is affected, avoid making changes across a business network without coordinating with IT or security responders. CISA recommends immediate isolation of affected systems in its #StopRansomware Guide; No More Ransom also advises disconnecting the infected device from the internet and other networks.
  2. Do not rush to shut the computer down if evidence may matter. CISA cautions that powering down can destroy information held in volatile memory. For a serious business incident or one affecting several devices, contact qualified IT or security responders and follow your incident plan. If you cannot disconnect the computer from the network any other way, prioritize stopping its connection.
  3. Preserve the ransom note. Photograph or screenshot it, and keep related messages. Its details may help identify the ransomware and support reporting or a search for a decryptor. Do not treat a claim that the note comes from law enforcement or another trusted organization as proof that it is genuine.
  4. Keep sensitive activity off the affected computer. Do not use it for banking or enter passwords. If you have reason to think account credentials were stolen, use a separate, clean device and seek qualified advice before changing important passwords. Organizations should include identity and access containment in their response.

Should you pay the ransom?

The FBI says, “The FBI does not support paying a ransom in response to a ransomware attack.” Payment does not guarantee that criminals will restore access to your files, and the FBI warns that it may encourage further attacks. Consider recovery options and reporting rather than treating payment as a dependable fix. See the FBI’s ransomware guidance.

As an Amazon Associate I earn from qualifying purchases.

How to try to recover encrypted files

First distinguish removing the ransomware from decrypting files: cleaning up the malware can help prevent more files from being encrypted, but it does not unlock files that are already encrypted. No More Ransom states, “Removing the ransomware will not decrypt your files, but it will let you carry out the following steps without new files becoming encrypted.”

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Restore from a known-clean backup

If you have an offline or otherwise known-clean backup, use it only after the infection has been contained and the computer is safe to recover. CISA recommends restoring from offline encrypted backups and taking care not to reinfect clean systems. If the affected device is part of a business or shared network, have IT or a qualified responder assess it before reconnecting devices or restoring data.

#1 Best Overall
Sale
Seagate 2TB Portable Hard Drive | USB 3.0 (STGX2000400) | Everyday HDD storage. Plug-and-play backup. Windows & macOS. Adobe CC trial included. 1-Year Warranty
  • Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
  • Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
  • To get set up, connect the portable hard drive to a computer for automatic recognition no software required
  • This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
  • The available storage capacity may vary.

Check whether a free decryptor exists

If you do not have a usable backup, preserve the ransom note and use the No More Ransom decryption-tool directory to check whether a tool is available for the identified ransomware. A decryptor may not exist for that variant, so do not assume your files can be recovered this way. Avoid downloading purported decryption tools from unverified sources.

Get specialist help when the incident is consequential

Contact qualified IT or security responders if the incident affects a business, public service, multiple devices, or sensitive information. CISA’s guide is written for organizational response and covers evidence, containment, eradication, and recovery; a complex incident is not just a consumer computer repair. Organizations should also use their incident plan and consider legal, privacy, and sector-specific notification duties.

Rank #2
Seagate Portable 5TB External Hard Drive HDD – USB 3.0 for PC, Mac, PS4, & Xbox - 1-Year Rescue Service (STGX5000400), Black
  • Easily store and access 5TB of content on the go with the Seagate portable drive, a USB external hard Drive
  • Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
  • To get set up, connect the portable hard drive to a computer for automatic recognition software required
  • This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
  • The available storage capacity may vary.

Report the incident

In the United States, the FBI advises victims to contact a local FBI field office or submit a report through IC3. CISA’s organizational guide also identifies CISA, the FBI, and the U.S. Secret Service as reporting or assistance routes. Use official agency websites for current contact details. These are U.S. options; outside the United States, contact the appropriate national law-enforcement or cybercrime reporting service. Organizations should follow applicable breach-notification requirements.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Prepare an offline backup for next time

A portable external hard drive can serve as a physical backup destination, but it is not a decryption tool and will not by itself restore files already encrypted in the current incident. No More Ransom recommends keeping a physical backup copy, such as a portable hard drive, disconnected when it is not in use. Do not connect a backup drive to a computer that may still be infected.

Quick Recap

SaleBestseller No. 1
Seagate 2TB Portable Hard Drive | USB 3.0 (STGX2000400) | Everyday HDD storage. Plug-and-play backup. Windows & macOS. Adobe CC trial included. 1-Year Warranty
Seagate 2TB Portable Hard Drive | USB 3.0 (STGX2000400) | Everyday HDD storage. Plug-and-play backup. Windows & macOS. Adobe CC trial included. 1-Year Warranty
This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable; The available storage capacity may vary.
$129.99
Bestseller No. 2
Seagate Portable 5TB External Hard Drive HDD – USB 3.0 for PC, Mac, PS4, & Xbox - 1-Year Rescue Service (STGX5000400), Black
Seagate Portable 5TB External Hard Drive HDD – USB 3.0 for PC, Mac, PS4, & Xbox - 1-Year Rescue Service (STGX5000400), Black
This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable; The available storage capacity may vary.
$229.99
Bestseller No. 3
Seagate Portable 1TB External Hard Drive HDD – USB 3.0 for PC, Mac, PlayStation, & Xbox, 1-Year Rescue Service (STGX1000400) , Black
Seagate Portable 1TB External Hard Drive HDD – USB 3.0 for PC, Mac, PlayStation, & Xbox, 1-Year Rescue Service (STGX1000400) , Black
This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable; The available storage capacity may vary.
$119.80
Bestseller No. 4
Seagate Portable 4TB External Hard Drive HDD – USB 3.0, 1-Year Rescue
Seagate Portable 4TB External Hard Drive HDD – USB 3.0, 1-Year Rescue
This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable; The available storage capacity may vary.
$208.99
Best Value
Sale
UnionSine 500GB Ultra Slim Portable External Hard Drive HDD-USB 3.0
  • [Upgraded Version] - This external hard drive features a mirrored logo stripe combined with a striped anti-slip design, and the rounded corners of the casing make it easier to grip. The stripes also have a heat dissipation function, ensuring stable and fast data transfer.
  • 【Ultra-thin and quiet】 - The motherboard adopts JMicron 578 noise-free solution, giving you a quiet working environment. Lightweight and portable size designed to fit in your pocket for easy portability.
  • 【Ultra-Fast Data Transfers】 - Pairing this external hard drive with JMicron 578 solution USB 3.0 and USB 2.0 interfaces enables blazing-fast data transfer. It boasts theoretical read speeds of up to 125MB/s and write speeds of up to 103MB/s.
  • 【Plug and Play】 - With no software to install, just plug it in and the drive is ready to use.The hard disk chip is wrapped with an aluminum anti-interference layer to increase heat dissipation and protect data.
  • 【What You Get】 - 1 x Portable Hard Drive, 1 x USB 3.0 Cable, 1 x User Manual, Gift-type shell packaging ,Three-year manufacturer's warranty and free technical support services.
Rank #4
Seagate Portable 4TB External Hard Drive HDD – USB 3.0, 1-Year Rescue
  • Easily store and access 4TB of content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
  • Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
  • To get set up, connect the portable hard drive to a computer for automatic recognition no software required
  • This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
  • The available storage capacity may vary.
Rank #3
Seagate Portable 1TB External Hard Drive HDD – USB 3.0 for PC, Mac, PlayStation, & Xbox, 1-Year Rescue Service (STGX1000400) , Black
  • Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
  • Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
  • To get set up, connect the portable hard drive to a computer for automatic recognition no software required
  • This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
  • The available storage capacity may vary.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.