So, how the heck does a PIF file from an e-mail attachment get written somewhere it might get executed and then how the heck does it get executed? For lots of details on e-mail to illustrate how hard or at least awkward such a position and execution of such a file would be, see my long, detailed discussion of the internals of common Internet e-mail. Net, just because someone sends me a PIF file, I can see no way they could hope that I would execute it.