In case of any infection, the necessary measures are to take the affected machines offline, extract whatever data you need, and then wipe.