Changes

===Other information===

===Other information===

If any memory devices are infected, then connected to a clean system, they can infect that system.  Therefore, users should be careful to only access clean devices on clean systems.  If a storage device is in question, the computer's hard drives can be disconnected, and using a boot disk alone, the user can attempt to verify that the device is clean (or not).  If the ransomware attacks the BIOS, however, even this may not be safe to attempt.

*If any memory devices are infected, then connected to a clean system, they can infect that system.  Therefore, users should be careful to only access clean devices on clean systems.  If a storage device is in question, the computer's hard drives can be disconnected, and using a boot disk alone, the user can attempt to verify that the device is clean (or not).  If the ransomware attacks the BIOS, however, even this may not be safe to attempt.

*RAID backups (drive mirroring/striping) probably will not help in the recovery from a ransomware infection.  Since RAID backups are updated almost in real time, the backup will usually be encrypted as well.

==References==

==References==

{{reflist}}

{{reflist}}

[[Category:Malware]]

[[Category:Malware]]