When encrypting files , the malware also deletes volume shadow copies .
When encrypting files , the malware also installs spyware that steals passwords and Bitcoin wallets .
When encrypting files , the malware also deletes volume shadow copies and installs spyware that steals passwords and Bitcoin wallets .