Ransomware shutdown