EnerMeter

There is a practice known as hotlinking, that is to insert an image into a website without physically capturing the image within that website. Here is an example, a photo of Luisa and me from a few years ago. It has no particular significance, other than that it is on the web and thus can be hotlinked. This first version is part of this post and is not a hotlink. It is a copy.

I am part of a team that runs a website with a lot of images: https://www.featurepics.com, if you need some good images drop in and we will be happy to sell you the license you need to legitimately use the photo that will tell your story. However, some sites take advantage of our catalog of images for sale by using them directly from our site. Of course they are watermarked but for some purposes that doesn’t matter. Like all sites we pay for bandwidth so each time someone looks at one of our images from someone else's site it costs us money and saves the hotlinker about the same amount of money.

More...

Today I got an email with the subject shown and the following text:

Unfortunately we were not able to deliver postal package you sent on July the 1st in time because the recipient’s address is not correct.

Please print out the invoice copy attached and collect the package at our office

Your UPS

It has a zipped attachment, which contains a folder named UPS_Invoice_317, which in turn contains UPS_INVOICE.exe.

I went to https://onecare.live.com/site/en-us/center/whatsnew.htm to see if they would identify it as a virus, or not, and signed up for their free scan. Files are downloading as I write this.

The Quick Scan did not find anything. I am guessing it did not look in "Temporary Internet files\Content.Outlook\...". So now I am running a full drive scan.

The full scan terminated with an error, so I ran it again. This time it found the Trojan:Win32/Agent.EE., but it could not be cleaned, probably because Istill have the email open.

I deleted the message from both email and from the computer.

It is clear I need a better scanner on the email server.