<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Got an email with subject: <b>Scanned Image from a Xerox WorkCentre</b><br>
<br>
The email contained a zip file (Scan_001_13082014_912.zip) with an
executable inside.
<br>
The executable is malicious.
<br>
<br>
You can read about it here:
<br>
Ref: <a class="moz-txt-link-freetext"
href="http://tools.cisco.com/security/center/viewAlert.x?alertId=35288">http://tools.cisco.com/security/center/viewAlert.x?alertId=35288</a>
<br>
<br>
<br>
The body of the email I received was:
<br>
<br>
Please open the attached document. It was scanned and sent to you
using a Xerox WorkCentre Pro.
<br>
<br>
Sent by: embarqmail.com Fax Machine
<br>
Sent for: rneeper
<br>
Number of Images: 7
<br>
Attachment File Type: ZIP [PDF]
<br>
<br>
WorkCentre Pro Location: Not Set
<br>
Device Name: B5QMVHVDYP
<br>
<br>
Attached file is scanned image in PDF format.
<br>
Adobe(R)Reader(R) can be downloaded from the following URL:<a
class="moz-txt-link-freetext" href="http://www.adobe.com/">http://www.adobe.com/</a>
<br>
<br>
<br>
<br>
<br>
<div class="moz-signature">-- <br>
<meta content="text/html; charset=utf-8" http-equiv="content-type">
<title>Email Signature</title>
<pre class="moz-signature" cols="80">R. W. (Bob) Neeper
<a href="http://sunbury.cool-cat.org" target="_blank">Community Library</a>
44 Burrer Dr. <a href="http://maps.google.com/maps?q=40.243961,+-82.863007">Map</a>
Sunbury, Oh 43074
Tel: (740)-965-3901
<a href="http://info.cool-cat.org"><img style="border: 0px solid ; width: 100px; height: 107px;" alt="cool-cat.org" src="cid:part5.07080001.02050808@oplin.org"></a></pre>
</div>
</body>
</html>