A user has received a message dialog box stating malware has been detected. The help desk team has confirmed infection and determined it is a ransomware virus. The issue has been escalated to the Incident Handling team, what should be the next step the Incident Handler team member?

Shutdown machine

Ask help desk staff to delete the detected malware

Immediately escalate to supervisor

Have help desk run an antivirus scan

Quarantine infected machine from the network

Create an incident/ticket

Explanation

To prevent encryption of file ss

EDIT: This is silly. If the infection was successful, the ransomware is already running. The best action, in my opinion, is to make sure it can't spread to anyone else on the network, can't phone home, and you can begin trying to remove it/fix it. If a malicious binary was detected, but never run, this still doesn't make sense because it can't start encrypting until it's running, at which point your AV can just remove it.