I am constantly getting a ransomware shield message that states “We’ver just protected your file. /System/Library/Frameworks/FileProvider.framework/Support/fileproviderd is trying to change or delete the file XXX.doc in your protected folder.”
my understanding is that fileproviderd is used for syncing icloud files with hard drive. Is this actually ransomware or is it OK to remove from the ransomware protected directories? This just started happening in the last few days.