What to do if your files were corrupted or renamed by ransomware

1) Remotely log out of your devices

Remotely log out of the infected device. If you don’t know which device is infected, you can remotely log out of every device.

2) Restore the desired files or folders

If you need to restore an individual file:

1. Go to your file’s version history page.
2. Select a version of the file before the ransomware took effect.
3. Click Restore.

If you need to restore a large number of files:

• The easiest way to do so is to use Dropbox Rewind to take your entire account or an entire folder back to a point in time before the ransomware occurred.

• You can also contact support for help rewinding.

3) Log into your device

Learn how to log back in on your device.

Before logging back in, we recommend that you:

• Make sure your device is free of malware.
• Delete the Dropbox folder with the previously encrypted files.
  • When you log back in on your device, you’ll download the recovered files from Dropbox instead of the encrypted ones. 

If you're still worried about your Dropbox account, contact us and we'll do whatever we can to help.