A common trick is naming a file something like song_collection.zip.exe . If your system hides extensions, it looks like a Zip file, but clicking it runs a malicious program.