Add in txt/html/htm extension requirement for ransomware messages

[kevross33]

Using filepath added in latest monitor check file being written is .txt or .html extension which helps to reduce false positives (and maybe increases performance as you aren't moving onto the next step as often for checking the lists)

[jbremer]

Merged, thanks!