1. Disconnect from the internet. Disconnecting from the internet will prevent the malware from communicating with the criminals' server and sending your files.
2. Shut down your computer. This will stop the malware from running and encrypting any more of your files.
3. Scan your computer. Before attempting to decrypt your files, you need to make sure that your computer is free of malware. Use an updated antivirus software to scan your computer for malware and remove any that it finds.
4. Backup your files. Once you've removed the malware, you need to back up your files. This will ensure that you don't lose any important data in case you are unable to decrypt your files.
5. Contact your data recovery specialist. Data recovery specialists can help you decrypt your files and restore your computer to its original state. They may be able to decrypt your files without having to pay the ransom.
6. Report the attack. Report the ransomware attack to the authorities so that they can track down the criminals and prevent future attacks.
Remember that paying the ransom is not always the best course of action. There is no guarantee that the criminals will decrypt your files even if you pay them. In addition, paying the ransom encourages criminals to continue developing and spreading ransomware attacks.