Step 1 Identify and research malware symptoms
Step 2 Quarantine the infected systems
Step 3 Disable System Restore (in Windows)
Step 4 Remediate the infected systems
Step 5 Schedule scans and run updates
Step 6 Enable System Restore and create a restore point (in Windows)
Step 7 Educate the end user