He came to me the next day and asked me to take a look. I went along and used windows defender and 0 threats were found. So I found that a bit odd. The ransomware did say don't turn off your PC or all its files will erase. So obviously that is what my dad did to try to save the computer. So maybe this saved him from the malware? I ran malwarebytes and 73 potential threats were found. Most of them looked like harmless files that the software could've gotten wrong so I brushed it off my shoulders. Less than 10 minutes later the ransomware opened up on chrome, so I quarantined all the files. Up to this point we have had no more situations, but I am afraid it is still there. What should I do? Also forgot to mention, I believe it is scareware cause none of his files have been encrypted.