A friend's PC got infected with BORA ransomware 2 days ago and I was wandering if his files would have been encrypted if he had made them 'read only' before the ransomware had struck.
Is it possible that he could have protected his data this way or is the ransomware still able to modify them?