Today I got an email with the subject shown and the following text:
Unfortunately we were not able to deliver postal package you sent on July the 1st in time because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office
Your UPS
It has a zipped attachment, which contains a folder named UPS_Invoice_317, which in turn contains UPS_INVOICE.exe.
I went to http://onecare.live.com/site/en-us/center/whatsnew.htm to see if they would identify it as a virus, or not, and signed up for their free scan. Files are downloading as I write this.
The Quick Scan did not find anything. I am guessing it did not look in "Temporary Internet files\Content.Outlook\...". So now I am running a full drive scan.
The full scan terminated with an error, so I ran it again. This time it found the Trojan:Win32/Agent.EE., but it could not be cleaned, probably because Istill have the email open.
I deleted the message from both email and from the computer.
It is clear I need a better scanner on the email server.
Subscribe