If you are hit with ransomware, a crime has been committed.
*Leave the system turned on
*Disconnect it from the network
*Call the cops! (US Secret Service or FBI in the US)
*Don't touch it until they give you the OK
*No, really, not at all, not even for that "just one little thing I need to do".
https://www.reddit.com/r/sysadmin/comments/b6u4m9/ransomware_what_to_do_best_practice/