Microsoft doesn’t recommend you pay the fine. There is no guarantee that paying the ransom will give you access to your files.
If you've already paid, see the question "What should I do if I've paid?" above.
How to remove the ransomware depends on what type it is.
If your web browser is locked
You can try to unlock your browser by using Task Manager to stop the web browser's process:
Open Task Manager. There are a number of ways you can do this:
In the list of Applications or Processes, click on the name of your web browser.
Click End task. If you are asked if you want to wait for the program to respond, click Close the program.
In some workplaces, access to Task Manager may be restricted by your network administrator. Contact your IT department for help.
When you open your web browser again, you may be asked to restore your session. Do not restore your session or you may end up loading the ransomware again.
See the question “How do I protect myself from ransomware” above for tips on preventing browser-based ransomware from running on your PC.
If your PC is locked
Method 1: Use the Microsoft Safety Scanner in safe mode
First, download a copy of the Microsoft Safety Scanner from a clean, non-infected PC. Copy the downloaded file to a blank USB drive or CD, and then insert it into the infected PC.
Try to restart your PC in safe mode:
When you're in safe mode, try to run the Microsoft Safety Scanner.
Method 2: Use Windows Defender Offline
Because ransomware can lock you out of your PC, you might not be able to download or run the Microsoft Safety Scanner. If that happens, you will need to use the free tool Windows Defender Offline:
See our advanced troubleshooting page for more help.
Steps you can take after your PC has been cleaned
Make sure your PC is protected with antimalware software.
Microsoft has free security software that you can use:
If you don't want to use Windows Defender or Microsoft Security Essentials, you can download other security software from another company. Just make sure it is turned on all the time, fully updated, and provides real-time protection.