Many people confuse READING a virus executable with EXECUTING a virus
executable. Every virus contains a trigger that *requires* the
execution of the file. Files don't normally execute by themselves.
In the case of email, it would require the recipient explicitly
executing this file after it was saved to the hard drive. The act of
saving the file to the hard drive does not pose any immediate threat.
Only if the virus is activated does it become a problem.
The exception:
Some applications contain macro languages that can cause damage if
read from a file, instead of being executed. Viruses designed this
way usually have limited capability, and are not really viruses by
definition. Postscript documents are an example of read-only files
that can contain destructive instructions to the application they run
under. There is also a somewhat famous one that runs under MS Word.
Bottom line is don't execute an executable unless you know what it
is.
-James Rogers
jamesr@best.com