What do you think about the story? Have I been attacked by ransomware or did Sophos allucinate? By trying to move some files after the issue, and giving admin rights in the attempt to do so, could I have triggered something bad? Why would the action of copying files from the USB stick trigger an encryption attempt (and warning from Sophos)?