The action that one should do first is to Disconnect the PC from the network.
When a person is attacked by this worm, experts has stated that the right thing to do is to quickly disconnect the computer from the network.
One can do so by turning off Wi-Fi. Then one can use another device to make an online search to see the kind of ransomware that has been used on your system.
See full question below
A customer opened a file attachment, and now her PC is infected with ransomware. She's unable to open any of her files. Which action would you take first?
A. Reinstall the operating system
B. Run an antivirus scan
C. Pay the ransom to recover the data
D. Disconnect the PC from the network
E. Restore files from backup
Learn more about ransomware from
https://brainly.com/question/22895542