Interesting email - is it a scam or virus?

[Stratmangler]

I just had an email land with donotreply@dartford-crossing-charge.service.gov.uk with an attachment named PaymentReceipt.xls .
I stupidly opened the attachment, knowing that the rules for payment on the crossing had changed, but then remembered that I haven't driven over the crossing in three years.
That time it was pay at the booth.

I am running a virus scan right now....... :doh:

[struth]

quite possibly. download and run a free 1 month trial of hitman pro http://www.surfright.nl/en/hitmanpro.it will tell you

[Ninanina]

Chris I am quite sure the attachment contains the virus known as ‘dynamo so it's probably good you are running a virus scan ;)

[Stratmangler]

I found a couple of things using Malwarebytes.
They've now been dealt with.

I posted this on another forum, and this came to light http://www.kentnews.co.uk/news/got_an_email_from_donotreply_dart_charge_co_uk_abo ut_using_the_dartford_crossing_be_warned_it_could_ be_malicious_and_contain_a_virus_1_4164592

Normally I'd approach this kind of thing with extreme caution, but I was taken in by the email, and I wouldn't say that I'm particularly gullible.
I wouldn't mind, but I've only been over the Dartford crossing once since they got rid of the toll booths, and then it was as a passenger :doh::doh:

Starting the thread was just a heads up to everyone .....

[walpurgis]

Have you considered contacting the Dartford Crossing people just in case the demand is genuine and was prompted by a car using a cloned number plate? I would. For two reasons.

If it's happened once it can happen again or earn you parking fees and speeding tickets. If you have a clone plate out there, you at least want it logged with police.

If the demand is genuine and you ingore it, you could face larger demands for late/non payment or even end up in court or facing bailiffs or court sheriffs. And of course having your credit rating damaged.

[Stratmangler]

It's not a demand.
It purports to be a receipt.

Read this http://www.kentnews.co.uk/news/got_an_email_from_donotreply_dart_charge_co_uk_abo ut_using_the_dartford_crossing_be_warned_it_could_ be_malicious_and_contain_a_virus_1_4164592