ransomware recovery (6)