1. Suspect Worm

1.2. Wipe/Restore Machine

	1.2.1. Bare Metal Restore?
	1.2.2. Snapshot Restore?
	1.2.3. PXE Based Restore
	1.2.4. Attached USB Backup Restore

1.1. Manual Analysis and Remediation Steps

1.3. Widespread?

1.4. Post-op Prevent Recurrence Policy