One day someone is going to write a filesystem filter driver that does this and build in a much longer delay, which will allow the malware to spread for a lot l

One day someone is going to write a filesystem filter driver that does this and build in a much longer delay, which will allow the malware to spread for a lot longer before dumping the keys and demanding ransom. The filter driver would ensure access to the files continues transparently even though the underlying data is encrypted. Things will get much worse.