Possible Infection

gwinters

I received an email today purporting to be from Verizon. The attached ZIP file is for a program named "balancechecker.exe"

The sender server appears to be in Mexico, based on a WhoIs of the sending IP address.

(No, I didn't run it.) McAfee is inconclusive.

Any experience?

gwinters

Symantec identified this "balancechecker.exe" file as (containing) the Downloader.Ergrun, a trojan which will download malware from various sites. McAfee didn't detect it (with most current signatures). Other antivirus products may detect it and identify it with another name.

The file is clearly not from Verizon, and should not be opened.