You turned on your computer and instead of your desktop, there's a message: 'Your files have been encrypted. Pay $500 in Bitcoin to get them back.' Don't panic — and don't pay.
Turning on your computer to find a message demanding payment to unlock your files is a gut-punch. Your photos, documents, work — everything held hostage. Take a breath. You have options, and they don't involve paying criminals.
Turn the computer off. Hold the power button or unplug it. Don't interact with the ransom message. Every minute it runs, more files get locked. Power down immediately — you haven't lost anything yet by turning it off.
Less than half of ransomware victims who pay actually get their files back. Many get targeted again because they're now flagged as someone who pays. And every payment funds more attacks on more people. Law enforcement agencies worldwide — including the RCMP — strongly recommend against it.
A technician can identify exactly which ransomware variant hit you. Some strains have free decryption tools available. Others can be worked around with backup recovery. The infection gets removed completely, and we'll show you how to make sure it never happens again — no judgment, just practical protection going forward.
Dealing with this right now? Book an emergency technician → — we'll be there within 60 minutes.
While the computer is off, avoid these common mistakes:
There are legitimate, free resources — the No More Ransom project (a law-enforcement and security-industry initiative) catalogues free decryptors for many known strains. Identifying your variant correctly is the first step, and it's exactly what a technician does before attempting recovery.
No. Payment doesn't reliably return your files, marks you as someone who pays (inviting repeat attacks), and funds further crime. The RCMP and security agencies recommend against it. Recovery through decryption tools or backups is the better path.
Sometimes. Some strains have free decryption tools; in other cases, recovery comes from clean backups or shadow copies. The first step is identifying the exact variant — which is why you shouldn't delete the ransom files or wipe the machine.
Some modern ransomware copies data before locking it. If sensitive accounts may be affected, change those passwords from a different, clean device and watch for fraud. A technician can assess what the specific strain is known to do.
Rather have a certified technician handle this?
Hardwired IT comes to your Ottawa home — same day, no fix no fee.
Book an On-Site Technician →Same-day on-site service across Ottawa. Free estimate. No fix, no fee.
Or call (613) 416-9482
No. Payment does not guarantee you'll get your files back, funds criminal operations, and marks you as someone willing to pay — making you a target for future attacks. Explore free decryptors first and consult a professional.
Sometimes. Free decryptors exist for many ransomware strains at No More Ransom (nomoreransom.org). If you have a recent backup, recovery is straightforward. A professional can also assess whether partial file recovery is possible.
Yes. Hardwired IT handles ransomware removal, data recovery assessment, and full system cleaning on-site in Ottawa. Call immediately — the sooner we can assess, the better the recovery chances.