GnomeComedy, 8 months ago

That, and:

• put down config files that were modified
• enable/start services that were installed
• modify the firewall to open necessary ports

Basically: put everything back as it was right before the ransomware encrypted your system on you.

Then of course - fix what you did wrong that got you compromised. ;-)