This video shows how to spot an email containing Cryptolocker. The email has a Microsoft Word attachment and claims to have been scanned by “Symantec Email.cloud service.” Opening the Word attachment doesn’t cause the virus to activate because the Word macro settings are set to prompt user to enable the content. Only when the Word content is enabled does the virus activate and encrypt the files on the computer.