Re: WARNING, mail and suspicious attachment

["Franz Schoenhofer" <franz.schoenhofer@CHELLO.AT>]

-----Ursprüngliche Nachricht-----

Von: Sandy Perle <sandyfl@EARTHLINK.NET>

An: radsafe@list.vanderbilt.edu <radsafe@list.vanderbilt.edu>

Datum: Mittwoch, 18. Juli 2001 22:50

Betreff: Re: WARNING, mail and suspicious attachment





> I received today a mail from Roy C. Craft, CHP (who has previously

> sent messages to RADSAFE), no address, reg. was "per watch or 200

> microcuries", the message was "Timepiece" and there was an attachment

> "CFGWIZ32.EXE (94.4 kB)".

>

> I have not opened the attachment, because it is very suspicious to me.

> The Norton Virus Protection gave no alarm, but it has previously

> several times not alarmed, when real viruses were transmitted.

>

> Is there anyone who has more information - maybe Roy can comment.



Franz and others,



NEVER open an attachment that contains an executable file (exe),

unless the person who sent it to you also verifies by speaking to

that person that the file is legit. As far as anti-virus software,

they can't tell if there is a virus until you attempt to execute it.

Right now its sitting there, and the program can't check it until you

activate it.



Unless you hear from Roy, I suggest that you DELETE it.

------------------------------------------------------------------------



Sandy,



Actually some previous warnings on RADSAFE alerted me, when I saw this very

queer message - which cannot be blamed to Roy!!! - and the EXE file. I have

deleted it already and I took extra precaution, not to "forward" this

message to the list.......



I do not rely on the anti-virus software. I do not take the risk to open

such a file and the virus is not identified and removed by the anti-virus

software.....



I am a very cautious person, which you may recognize from my radiation

shielding principle: It is better to shield alphas with lead, than gammas

with paper.



Franz









************************************************************************

You are currently subscribed to the Radsafe mailing list. To unsubscribe,

send an e-mail to Majordomo@list.vanderbilt.edu  Put the text "unsubscribe

radsafe" (no quote marks) in the body of the e-mail, with no subject line.