Hi Bart
I had tested with support Engineer.
Some Ransomware encrypted file by simulate zip file (zip+password+rename filename/extenion file type), but the file content still zip , so it still sync to filr server.
Base on such condition, we find a "easy method" to let user's file "unused",just randomly rename file name / extension...the content still original type...so these files still could sync to filr server. but user could not use them on job.
these file seem "fjskldj.dfjsdfjs" , even file content did not changed,user still could not convert it to correct extendion file type name like "a.DOC".

or NetIQ(Novell) could provide help user to easy batch to check file content type to convert correct file type name ?