Often disguised as a job application, PDF, or utility tool that initiates the infection.
If you were to open this archive (which is ), it would likely contain: Igor Petya.rar
Scripts or binaries designed to encrypt your data or the Master File Table (MFT) . Often disguised as a job application, PDF, or