Agenda ransomware Linux variant avoids encrypting files with the following strings in their file names: basemisc.tgz boot.cfg bootpart.gz features.gz imgdb.tgz initrd jumpstrt.gz onetime.tgz state.tgz useropts.gz vmlinuz