From 2-spyware.com
INFECTION ransomware is a file-locking virus that steals private data from the infected computer before encrypting all non-system files and demanding a ransom. The stolen files are held as leverage until the victims would pay the ransom. If contact isn’t made within seven of the attack, cybercriminals threaten to start publishing the files online.
The first thing that the virus does when it gains access to a targeted computer is scanning for frequently used files. As soon as some of them are downloaded onto a secure hacker server, all files are encrypted and renamed by appointing an .INFECTION extension to the original filenames.