The first step is disconnecting the machine from the internet, then going into safe mode. Examine the machine for unusual activity using anti-malware software and remove the virus. Also, double-check your browser extensions and remove suspicious apps.