Ransomware App leaves .part files behind

🍱 Features & apps ransomware-protection
1

Hi,

While waiting to get help the ransomware extension kept stopping a file that contains “encrypted” of being created. However, for every such attempt a file ending in .part and containing some sort of id following ocTransferId, for example blabla.txt.ocTransferId358084081.part is created.
The net result is that I have now about 1000 such files.

find -name “ocTransferIdpart” | wc -l

Couple of questions:

  1. Can I safely remove these?
  2. Should the app handle or facilitate this?
  3. Does a cron job pick this up and perhaps clean these up? (not sure it should)

best regards,
peter