The first step, once you’ve been infected, is to isolate the infected computer from the network. Disconnect from all peripherals, cloud services, and external hard drives. Knowing which ransomware variant you are dealing with can be tricky. A handful of public tools are available, but be warned they may not work on the specific ransomware version that nailed you. Kaspersky Lab recently released a tool to unlock files encrypted by CryptXXX. There’s also a tool for restoring files infected by Rakhni and its assorted variants. The attackers may have made mistakes in the encryption or a different part of the code.”]
Source: https://www.csoonline.com/article/3062903/got-ransomware-these-tools-may-help.html