: Look for "double extensions" (e.g., menu.pdf.exe ).
: Does it try to hide inside explorer.exe or svchost.exe ? To provide a more specific report, if you're comfortable: DENNE MENU.rar
: Does it attempt to connect to an unknown IP address (Command & Control server)? : Look for "double extensions" (e
: Upload the .rar file to VirusTotal to check it against 70+ antivirus engines. : Look for "double extensions" (e.g.