Crypto locker file variants monitor