Ransomware

What to do if you come in contact with ransomware:

1. Get the device OFF the network immediately (disconnect the network cable or turn off the wireless antenna)
2. Remove any external devices.
3. Change ALL your passwords to something totally different from your previous passwords. DO NOT RECYCLE PASSWORDS from your University account on other systems such as Facebook.
4. Contact IT-EntSec and either Brent Mehring or Vicki Harpe.
5. Contact your department's technical support person (Tier 1).
6. Ensure that all essential data is backed up to multiple devices (this malware “can” spread to other drives including network drives) therefore external storage should be considered and backed up frequently.
7. Validate that your machine has current virus protection installed.  (This should be Windows Defender on University owned Windows systems.)
   
8. If you do receive a suspicious email please enlist technical assistance before taking any action (including clicking on links, or replying).
9. Several security risks are also associated with old versions of Java, and Adobe products. Please ensure that you are running the latest version of both by going directly to the company web sites for updates.