Never run an executable simply named setup.exe or cactus.exe from an unverified email attachment or forum post from a new user.