This question already has an answer here:

I have had a ransomware attack that has only encrypted some files. Is there any way to find the virus and prevent it from encrypting more files?

marked as duplicate by schroeder Jan 1 at 15:25

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • 2
    It can be removed but the damage done by it may or may not be recovered. – defalt Dec 31 '18 at 20:56
  • So, how can I remove it? – Abdo Saied Anwar Dec 31 '18 at 20:57
  • As is true for most host compromises...your best bet is back up the data you have left and re-image the machine. – DarkMatter Dec 31 '18 at 22:08
  • Well the first thing you need to do is pull the plug immediately. – forest Jan 1 at 2:43
  • How can you remove it? It depends on the type of the ransomware. There ate tools created for specific type of ransomware. – Vini7 Jan 1 at 9:37

The best way to deal with a ransomware is to take out the plug immediately and remove the hard disk. You should always have a backup of the hard disk. Removing ransomware from a system is not that easy and a tedious task. The best way is to abandon the system and take a back up of all your data.

  • 2
    Why remove the hard disk after you unplug the power? Abandoning the system is not necessary if you can format and reinstall. – schroeder Jan 1 at 15:26

Not the answer you're looking for? Browse other questions tagged or ask your own question.