A developer reports that a workstation's database file extensions have been changed from .db to .enc. The developer is also unable to open the database files manually. Which of the following is the…

Accessing a restore point might revert system files but typically does not recover encrypted user data files.

Rebooting into safe mode may allow for troubleshooting or malware removal, but it does not decrypt or restore files that have already been compromised.

If files have been encrypted (indicated by a changed extension and inability to open them), it strongly suggests a ransomware attack; the best way to recover data without paying a ransom is to restore from clean, uninfected backups.

Using an AV to scan the affected files might identify the malware, but it is unlikely to decrypt the files or restore them to their original state.