If your account has been infected with ransomware, there are a few steps you can take to make sure your account is safe.
1) Remotely sign out of your devices
Remotely sign out of the infected device. If you don’t know which device is infected, you can remotely sign out of every device.
2) Restore the desired files or folders
If you need to restore an individual file:
- Go to your file’s version history page.
- Select a version of the file before the ransomware took effect.
- Click Restore.
If you need to restore a large number of files:
- The easiest way to do so is to use Dropbox Rewind to take your entire account or an entire folder back to a point in time before the ransomware occurred.
- This feature is only available to Dropbox Plus, Family, Professional, and Business users. Learn how to upgrade your account.
- You can also contact support for help rewinding.
3) Sign into your device
Before signing back in, we recommend that you:
- Make sure your device is free of malware.
- Delete the Dropbox folder with the previously encrypted files.
- When you sign back in on your device, you’ll download the recovered files from Dropbox instead of the encrypted ones.
If you're still worried about your Dropbox account, contact us and we'll do whatever we can to help.