RANSOMWARE INVESTIGATION AND REMOVAL