Windows has "previous versions" or shadow copies. Often, one of the first things ransomeware does is disable that function and delete them. Then it goes after

Windows has "previous versions" or shadow copies. Often, one of the first things ransomeware does is disable that function and delete them. Then it goes after your backups.