Re: "detecting infections and reverting unexpected encryption"
Valid points, this would be far better implemented at the file system level and probably easier too which makes me wonder why the file system writers haven't come up with something along these lines.
Biting the hand that feeds IT
