Please follow http://www.cdse.edu/micro/ransomware/ransomware.html.