let's say I have Dropbox installed on my PC with synchronization enabled. I store some of my data in the Dropbox folder so that data is synchronized with my Dropbox storage.
Now let's say that my PC was somehow infected with a ransomware virus. It starts encrypting my data and nothing stands in its way to access my Dropbox folder. Now I need to be proven right or wrong - if the virus encrypts all the data in Dropbox sync folder, the encrypted data would either replace my original files or the encrypted files would get uploaded to my Dropbox storage and all my original files would get removed from there.
Is that true or not? Are all the files synchronized with Dropbox still vulnerable to ransomware? Does ransomware replace the original files with encrypted ones or does it just put all the encrypted data into one file?
I know how to reduce the risk of getting infected with ransomware. I'm just asking hypothetical questions to know more about ransomware.