A technician received a call stating that all files in a user's documents folder appear to be changed, and each of the files now has a .lock file extension. Which of the following actions is the FIRST step the technician should take?
- Run a live disk clone.
- Run a full antivirus scan.
- Use a batch file to rename the files.
- Disconnect the machine from the network.
Reveal Solution Next Question