help please = pdf.zip

[cojak]

Hate to pick holes Cojak, but it's going to be hard to download Malwarebytes if it's not plugged in. So if I may,

(1) Delete the email. If by any stroke of luck they couldn't / didn't open it, you might be ok,
(2) Then download Malwarebytes. Resist the offers of trying the premium version, because if you do, it won't run after 28 days when the premium trial expires.
(3) Proceed as per other comments

Quite right Platypus,

But Sarah isn't going to get there until this afternoon. I was simply thinking about them putting the machine offline until she got there.

[sal]

I would use both - Avast for ongoing protection (and also an initial scan), and malwarebytes to check for other nasties.

Depending on what they actually need a computer for, given this level of mistake, I would actually look at Linux Mint (which does pretty much everything that a "normal" user would need) since your chances of viruses are much lower - I get sent .exe files in my emails which Linux just bins for me.

Agree on the first part, As for the Linux, if their level of computer expertise is low enough to not know how to clean nasties, Linux learning curve will be too much. Not to mention it will further limit their ability to get help from others, as most help desk types are mostly Windows.

One additional step is to use online scanners like Free Virus Scan | Online Virus Scanner from ESET just to triple check.

Also if they have another PCs connected to the same network make sure to check all of them as well.

[TheFaQQer]

Agree on the first part, As for the Linux, if their level of computer expertise is low enough to not know how to clean nasties, Linux learning curve will be too much. Not to mention it will further limit their ability to get help from others, as most help desk types are mostly Windows.

One additional step is to use online scanners like Free Virus Scan | Online Virus Scanner from ESET just to triple check.

Also if they have another PCs connected to the same network make sure to check all of them as well.

I don't see a learning curve with Linux Mint, apart from remembering that it's Libre Office rather than MS Office.

If my parents can cope, I'm pretty sure most people could.

[PerfectStorm]

See if you can get hold of the original email and open the zip. From there you'll be able to see the file extension of the actual file contained, which will tell you whether it's worth opening or not. Something benign like a word doc, text file or other PDF should be OK, but something executable then I woudn't.

Cue: "IT MIGHT STILL BE A VIRUS!!"

[cojak]

See if you can get hold of the original email and open the zip. From there you'll be able to see the file extension of the actual file contained, which will tell you whether it's worth opening or not. Something benign like a word doc, text file or other PDF should be OK, but something executable then I woudn't.

Cue: "IT MIGHT STILL BE A VIRUS!!"

Do not open any *zip file from an email address you don't recognise.

End of.

*Or any file for that matter.

My spam filter is set to 'junk' for any .zip file. I look and review regularly in case i recognise the name, but if I did I would contact the user to tell them that I don't accept unsolicited .zip files and that they should alert me before sending them.

[PerfectStorm]

Do not open any *zip file from an email address you don't recognise.

End of.

*Or any file for that matter.

My spam filter is set to 'junk' for any .zip file. I look and review regularly in case i recognise the name, but if I did I would contact the user to tell them that I don't accept unsolicited .zip files and that they should alert me before sending them.

Whilst that's certainly very cautious, bar a few very extreme examples there's nothing wrong with opening a zip to see what the content file is.

[Platypus]

Whilst that's certainly very cautious, bar a few very extreme examples there's nothing wrong with opening a zip to see what the content file is.

If it's a zip. Beware exe's masquerading as Zips

[PerfectStorm]

If it's a zip. Beware exe's masquerading as Zips

Absolutely. So not including honestguv.zip.exe in my advice

[Sysman]

Whilst that's certainly very cautious, bar a few very extreme examples there's nothing wrong with opening a zip to see what the content file is.

My standard practice is to use command line unzip to list the contents of zipfiles (unzip -l), even those from a so-called trusted source, before extracting them. I like to know what I'm putting onto a system.

[SarahL2012]

Just catching up with this thread. I think it's fair to say their IT knowledge is limited to Outlook - & even that got stressful when it decided to put a reading pane in the 'wrong' place. I ran one of the free virus checks recommend (thanks!) & all showed up clear luckily.

One of the other volunteers helps with their web page & I'm going to see whether he can have a look at their desktop too. They were lucky this time & I'd rather make sure everything is ok before they brave internet banking.