3 ms·Yes... the malware replaces each file with an encrypted version. It works on an individual file level.by benjohnson 12y agoYes... the malware replaces each file with an encrypted version. It works on an individual file level.