Disconnecting the threat, restoring clean files, updating software, and strengthening security are important first steps. We can help with the recovery process.