When defenses fail: How to recover from ransomware