The 1st time: About several months ago, one of my family's desktop was infected. All the word (doc, docx) and txt files were encrypted, but other fuile type, like mp3, image files were not. The date of encrypted files were changed to 2022/01/13. The desktop had Win10 and Kaspersky Endpoint Seurity 11.6 installed. Then the C drive was formatted and new Win10 and Kaspersky Endpoint Seurity 11.6 was installed The 2nd time: Today, the files in that desktop, including mp3, image files were all encrypted, while the mp3 file can be read a few days ago. The desktop is used by adult, who has good habit of using computer for more than 10 years. They use computer for web broswering (limited websites), online banking, online game (official, legitimated app installed), some online flash games. He told me that the mp3 files can be opened a few days ago.