Re: WARNING, mail and suspicious attachment

[Chuck Cooper <ccc@pp.pdx.edu>]

It's a trojan, he probably does not know he sent it. If you don't execute it,

nothing will happen although he does have an infected computer. See:



http://www.windowsitsecurity.com/Panda/Index.cfm?FuseAction=Virus&VirusID=407



Franz Schoenhofer wrote:



> Private:

> Franz Schoenhofer

> Habicherg. 31/7

> A-1160 Vienna, AUSTRIA

> Phone: -43 699 11681319

> e-mail: franz.schoenhofer@chello.at

>

> Office:

> MR Dr. Franz Schoenhofer

> Federal Ministry for Agriculture, Forestry, Environment and Water Management

> Dep. I/8U, Radiation Protection

> Radetzkystr. 2

> A-1031 Vienna, AUSTRIA

> phone: +43-1-71100-4458

> fax: +43-1-7122331

> e-mail: franz.schoenhofer@bmu.gv.at

>

> Hi all,

>

> I received today a mail from Roy C. Craft, CHP (who has previously sent

> messages to RADSAFE), no address, reg. was "per watch or 200 microcuries",

> the message was "Timepiece" and there was an attachment "CFGWIZ32.EXE (94.4

> kB)".

>

> I have not opened the attachment, because it is very suspicious to me. The

> Norton Virus Protection gave no alarm, but it has previously several times

> not alarmed, when real viruses were transmitted.

>

> Is there anyone who has more information - maybe Roy can comment.

>

> Franz

>

> ************************************************************************

> You are currently subscribed to the Radsafe mailing list. To unsubscribe,

> send an e-mail to Majordomo@list.vanderbilt.edu  Put the text "unsubscribe

> radsafe" (no quote marks) in the body of the e-mail, with no subject line.



************************************************************************

You are currently subscribed to the Radsafe mailing list. To unsubscribe,

send an e-mail to Majordomo@list.vanderbilt.edu  Put the text "unsubscribe

radsafe" (no quote marks) in the body of the e-mail, with no subject line.