You have identified that a user's PC has been infected with a virus. Your first step after identifying the issue should be: