Suspicious ISO file received by mailISO file installationMail migration: pumping mails into IMAP accountHow...
As a new poet, where can I find help from a professional to judge my work?
Must a tritone substitution use a dominant seventh chord?
Contradiction with Banach Fixed Point Theorem
What can I substitute for soda pop in a sweet pork recipe?
Why do members of Congress in committee hearings ask witnesses the same question multiple times?
What is the wife of a henpecked husband called?
What am I? I am in theaters and computer programs
Could quantum mechanics be necessary to analyze some biology scenarios?
How to add multiple differently colored borders around a node?
Book where the good guy lives backwards through time and the bad guy lives forward
Why does Starman/Roadster have radial acceleration?
Can I become debt free or should I file for bankruptcy? How do I manage my debt and finances?
g++ and clang++ different behaviour with recursive initialization of a static member
Is there a frame of reference in which I was born before I was conceived?
Use comma instead of & in table
Why is working on the same position for more than 15 years not a red flag?
Does music exist in Panem? And if so, what kinds of music?
Are small insurances worth it
Can chords be played on the flute?
How to deny access to SQL Server to certain login over SSMS, but allow over .Net SqlClient Data Provider
If a druid in Wild Shape swallows a creature whole, then turns back to her normal form, what happens?
Waiting for the gravy at a dinner table
Called into a meeting and told we are being made redundant (laid off) and "not to share outside". Can I tell my partner?
What is better: yes / no radio, or simple checkbox?
Suspicious ISO file received by mail
ISO file installationMail migration: pumping mails into IMAP accountHow do I find the Event ID for an incoming email?Creating File Handler in Lotus Notes 8.5.3 for raw DXL FileAutomate printing of more than 10,000 emails and their attachments, including the contents of ZIP filesMX Records / DNS settings (mail not received)Retrieve IP from a mail I receivedWhat diagnosis steps can I do if my emails send, but are not received, not even as spam?How to read Received fields in the mail header?How are these emails entering my mail queue, and why is Google reporting “Bad credentials”?
I have received a mail from a company .com.jo pretending it was a DHL notice.
It was clearly not as the pdf file had in fact an .iso extension.
As far as I know, such files are system images, so that launching it can practically replace your system.
I wonder, however, what would happen if I double click on it. Would it automatically start? Is it a new type of threat? So far, I haven't found information about such files.
email iso-image
asked 7 hours ago
Marc VanhoomissenMarc Vanhoomissen
1134
add a comment |
I have received a mail from a company .com.jo pretending it was a DHL notice.
It was clearly not as the pdf file had in fact an .iso extension.
As far as I know, such files are system images, so that launching it can practically replace your system.
I wonder, however, what would happen if I double click on it. Would it automatically start? Is it a new type of threat? So far, I haven't found information about such files.
email iso-image
asked 7 hours ago
Marc VanhoomissenMarc Vanhoomissen
1134
Most archive programs can extract an ISO, the dangers of extracting a malicious archive file are well known. Don't attempt to open the archive. Just delete the email.
– Ramhound
3 hours ago
add a comment |
I have received a mail from a company .com.jo pretending it was a DHL notice.
It was clearly not as the pdf file had in fact an .iso extension.
As far as I know, such files are system images, so that launching it can practically replace your system.
I wonder, however, what would happen if I double click on it. Would it automatically start? Is it a new type of threat? So far, I haven't found information about such files.
email iso-image
asked 7 hours ago
Marc VanhoomissenMarc Vanhoomissen
1134
I have received a mail from a company .com.jo pretending it was a DHL notice.
It was clearly not as the pdf file had in fact an .iso extension.
As far as I know, such files are system images, so that launching it can practically replace your system.
I wonder, however, what would happen if I double click on it. Would it automatically start? Is it a new type of threat? So far, I haven't found information about such files.
email iso-image
email iso-image
asked 7 hours ago
Marc VanhoomissenMarc Vanhoomissen
1134
asked 7 hours ago
Marc VanhoomissenMarc Vanhoomissen
1134
asked 7 hours ago
Marc VanhoomissenMarc Vanhoomissen
1134
asked 7 hours ago
Marc VanhoomissenMarc Vanhoomissen
1134
asked 7 hours ago
Marc VanhoomissenMarc Vanhoomissen
1134
1134
Most archive programs can extract an ISO, the dangers of extracting a malicious archive file are well known. Don't attempt to open the archive. Just delete the email.
– Ramhound
3 hours ago
add a comment |
Most archive programs can extract an ISO, the dangers of extracting a malicious archive file are well known. Don't attempt to open the archive. Just delete the email.
– Ramhound
3 hours ago
Most archive programs can extract an ISO, the dangers of extracting a malicious archive file are well known. Don't attempt to open the archive. Just delete the email.
– Ramhound
3 hours ago
Most archive programs can extract an ISO, the dangers of extracting a malicious archive file are well known. Don't attempt to open the archive. Just delete the email.
– Ramhound
3 hours ago
add a comment |
2 Answers
2
active
oldest
votes
An ISO file is a whole disk image, but it is not necessarily self-executing. It is treated by the OS and software as an archive, much like ZIP or TAR files.
It is possible that this file is a Zip (well, ISO) bomb, relying on flaws in an archiver such as Windows built-in ISO viewer or 7-Zip to crash the system.
It is also possible that the file contains password-protected malware -- by using a password, the file cannot be evaluated by antimalware tools.
Since it arrived in an obvious phishing attack, handle with care, of course.
answered 7 hours ago
DrMoishe PippikDrMoishe Pippik
10.3k21432
Actually, it is never self-executing. Autorun was disabled years ago, for good reasons. You’d have to confirm explicitly that you want to launch an autorun application, if present.
– Daniel B
7 hours ago
In my case, I haven't seen any password in the message but it has not been detected as an infected message by my Bitdefender software.
– Marc Vanhoomissen
6 hours ago
add a comment |
"if I double click on it. Would it automatically start?"
It could, never double click unknown files.
Open it with a compression utility like 7-Zip, this will show the contents of the iso without any danger. You can even extract portions of the iso (if it is actually an iso) if you wish.
answered 7 hours ago
MoabMoab
51.3k1494160
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1411150%2fsuspicious-iso-file-received-by-mail%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
An ISO file is a whole disk image, but it is not necessarily self-executing. It is treated by the OS and software as an archive, much like ZIP or TAR files.
It is possible that this file is a Zip (well, ISO) bomb, relying on flaws in an archiver such as Windows built-in ISO viewer or 7-Zip to crash the system.
It is also possible that the file contains password-protected malware -- by using a password, the file cannot be evaluated by antimalware tools.
Since it arrived in an obvious phishing attack, handle with care, of course.
answered 7 hours ago
DrMoishe PippikDrMoishe Pippik
10.3k21432
Actually, it is never self-executing. Autorun was disabled years ago, for good reasons. You’d have to confirm explicitly that you want to launch an autorun application, if present.
– Daniel B
7 hours ago
In my case, I haven't seen any password in the message but it has not been detected as an infected message by my Bitdefender software.
– Marc Vanhoomissen
6 hours ago
add a comment |
An ISO file is a whole disk image, but it is not necessarily self-executing. It is treated by the OS and software as an archive, much like ZIP or TAR files.
It is possible that this file is a Zip (well, ISO) bomb, relying on flaws in an archiver such as Windows built-in ISO viewer or 7-Zip to crash the system.
It is also possible that the file contains password-protected malware -- by using a password, the file cannot be evaluated by antimalware tools.
Since it arrived in an obvious phishing attack, handle with care, of course.
answered 7 hours ago
DrMoishe PippikDrMoishe Pippik
10.3k21432
Actually, it is never self-executing. Autorun was disabled years ago, for good reasons. You’d have to confirm explicitly that you want to launch an autorun application, if present.
– Daniel B
7 hours ago
In my case, I haven't seen any password in the message but it has not been detected as an infected message by my Bitdefender software.
– Marc Vanhoomissen
6 hours ago
add a comment |
An ISO file is a whole disk image, but it is not necessarily self-executing. It is treated by the OS and software as an archive, much like ZIP or TAR files.
It is possible that this file is a Zip (well, ISO) bomb, relying on flaws in an archiver such as Windows built-in ISO viewer or 7-Zip to crash the system.
It is also possible that the file contains password-protected malware -- by using a password, the file cannot be evaluated by antimalware tools.
Since it arrived in an obvious phishing attack, handle with care, of course.
answered 7 hours ago
DrMoishe PippikDrMoishe Pippik
10.3k21432
An ISO file is a whole disk image, but it is not necessarily self-executing. It is treated by the OS and software as an archive, much like ZIP or TAR files.
It is possible that this file is a Zip (well, ISO) bomb, relying on flaws in an archiver such as Windows built-in ISO viewer or 7-Zip to crash the system.
It is also possible that the file contains password-protected malware -- by using a password, the file cannot be evaluated by antimalware tools.
Since it arrived in an obvious phishing attack, handle with care, of course.
answered 7 hours ago
DrMoishe PippikDrMoishe Pippik
10.3k21432
answered 7 hours ago
DrMoishe PippikDrMoishe Pippik
10.3k21432
answered 7 hours ago
DrMoishe PippikDrMoishe Pippik
10.3k21432
answered 7 hours ago
DrMoishe PippikDrMoishe Pippik
10.3k21432
10.3k21432
Actually, it is never self-executing. Autorun was disabled years ago, for good reasons. You’d have to confirm explicitly that you want to launch an autorun application, if present.
– Daniel B
7 hours ago
In my case, I haven't seen any password in the message but it has not been detected as an infected message by my Bitdefender software.
– Marc Vanhoomissen
6 hours ago
add a comment |
Actually, it is never self-executing. Autorun was disabled years ago, for good reasons. You’d have to confirm explicitly that you want to launch an autorun application, if present.
– Daniel B
7 hours ago
In my case, I haven't seen any password in the message but it has not been detected as an infected message by my Bitdefender software.
– Marc Vanhoomissen
6 hours ago
Actually, it is never self-executing. Autorun was disabled years ago, for good reasons. You’d have to confirm explicitly that you want to launch an autorun application, if present.
– Daniel B
7 hours ago
Actually, it is never self-executing. Autorun was disabled years ago, for good reasons. You’d have to confirm explicitly that you want to launch an autorun application, if present.
– Daniel B
7 hours ago
In my case, I haven't seen any password in the message but it has not been detected as an infected message by my Bitdefender software.
– Marc Vanhoomissen
6 hours ago
In my case, I haven't seen any password in the message but it has not been detected as an infected message by my Bitdefender software.
– Marc Vanhoomissen
6 hours ago
add a comment |
"if I double click on it. Would it automatically start?"
It could, never double click unknown files.
Open it with a compression utility like 7-Zip, this will show the contents of the iso without any danger. You can even extract portions of the iso (if it is actually an iso) if you wish.
answered 7 hours ago
MoabMoab
51.3k1494160
add a comment |
"if I double click on it. Would it automatically start?"
It could, never double click unknown files.
Open it with a compression utility like 7-Zip, this will show the contents of the iso without any danger. You can even extract portions of the iso (if it is actually an iso) if you wish.
answered 7 hours ago
MoabMoab
51.3k1494160
add a comment |
"if I double click on it. Would it automatically start?"
It could, never double click unknown files.
Open it with a compression utility like 7-Zip, this will show the contents of the iso without any danger. You can even extract portions of the iso (if it is actually an iso) if you wish.
answered 7 hours ago
MoabMoab
51.3k1494160
"if I double click on it. Would it automatically start?"
It could, never double click unknown files.
Open it with a compression utility like 7-Zip, this will show the contents of the iso without any danger. You can even extract portions of the iso (if it is actually an iso) if you wish.
answered 7 hours ago
MoabMoab
51.3k1494160
answered 7 hours ago
MoabMoab
51.3k1494160
answered 7 hours ago
MoabMoab
51.3k1494160
answered 7 hours ago
MoabMoab
51.3k1494160
51.3k1494160
add a comment |
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1411150%2fsuspicious-iso-file-received-by-mail%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Most archive programs can extract an ISO, the dangers of extracting a malicious archive file are well known. Don't attempt to open the archive. Just delete the email.
– Ramhound
3 hours ago