http://arstechnica.com/security/2016/07/posing-as-ransomware-windows-malware-just-deletes-victims-files/