Recovering From a Ransomware Attack

Perform the following steps when Ransomware is detected in a client computer.

1. Disable network connections to the affected client.

2. Disable all backups from the client.

   • From the CommCell Browser, right-click the Client and select Properties.

   • On the Activity Control tab, clear the Enable Backup check box.

   • Click OK.

3. Make sure that the Ransomware is cleared and the client is clean.

4. Enable network connections to the client.

5. Restore the necessary data from an older backup.

   See Restore Backup Data for more information.

6. Enable all backups from the client.

   • From the CommCell Browser, right-click the Client and select Properties.

   • On the Activity Control tab, select the Enable Backup check box.

   • Click OK.