If it's a virus, you MIGHT be able to find out by a suggestion proposed on PcSoft. Then again, we might make a mistake. Even with our collective intelligence and experience, we certainly don't know everything. Same with the other sites that you suggested. Your best bet is as follows: You don't know who sent you the message? Then I doubt that it is all that important. Dump it. Can't bear the possibility of dumping it? Carefully move it to a diskette (but be sure you don't double-click on it while moving it!). Open it in a computer that you don't care much about (and that won't be the computer you are using to read this message, right?). Perhaps you or a friend have an old 586 that needs reformatting anyway. Even better - let the diskette sit around for a while. Either you'll lose interest, or something will turn up on one of the Virus websites. Even then, my suggestion is to open it in a computer that you don't care about. David Grossman ----- Original Message ----- From: Marc Guise <[log in to unmask]> To: <[log in to unmask]> Sent: Tuesday, November 06, 2001 2:53 PM Subject: Re: [PCSOFT] How to Discover if an Attachment is a Virus Without Opening It? > At 12:34 6/11/01 -0500, you wrote: > > Today I received an email message with the subject !"#$ (obviously > >spam) but no message, just an attachment named pbrush.zl9. I would like to > >know if the attachment is a virus or some other evil > > > The extension "zl9" is usually associated with Zone Alarm. This attachment > has been found suspect by ZA and subsequently quarantined. I would > defiitely delete without opening. In the past I've overridden ZA's warnings > on attachments twice and been infected from those files. > Make sure your antivirus program is updated and check that it is set up to > scan attachments > > Marc > > Curious about the people moderating your > messages? Visit our staff web site: > http://freepctech.com/staff.shtml Curious about the people moderating your messages? Visit our staff web site: http://freepctech.com/staff.shtml