Gary.exe or CPL

Yesterday I got hit in real e-mail with something.

Main body reads predetor- attached is Garry.cpl

Today e-mail comes from same e-mail address only with GArry.exe wich OE blocks.

The scan of Garry.cpl with KAV, Norton, Panda & trend find nothing.

I am on the road with laptop and haven't installed TDS-3 on it yet.

Does someone want to look it over for me?

Bruce

 

Here you'll find the manual removal instructions, otherwise you could post your log at SpyBlocker Forum and I'll see what I can do.

http://vic.zonelabs.com/tmpl/body/CA/virusDetails.jsp?VId=39641

 

Yup that is the one infinity but still wondering why KAV, Norton, Bitdefender
& trend didn't pick that up right away?

Varient?

I never clicked on the either attachment and am pretty any traces were gone after reboot. Shadowsurfer on this laptop.



Bruce

 

once they have your email they try to spam your account...once you even click on them they now your account is active...it's not fair but it's quite common nowadays...
Just don't click on any of them, directly remove them...flush your cache and pray to God ...No serious...Could be your system isn't infected after all. your webaccount should take care of that I guess...have you tried in safe mode Bruce?

 

I just contacted my ISP for that account and at least they are aware of it.

I am guessing it is a hybrid. The site you directed me to states it was created back in 2004. All AV should catch it now I would think.
This has to be a new one.

I would think using Shadowuser, I shouldn't have to worry.
nothing can be writen to the system and stay after reboot.

I did change my bank pass yesterday & suppose I could do it again now dang it. It only hits one of my accounts so I will just delete that one for now.
I would think the AV's would want a copy but after I reboot, it will be gone.
Even my e-mail gets deleted in shadowuser after reboot.
Like I say OE blocks exe files anyway, unless they can get thru that too.

Bruce

 

Just an update::::::


NOrton Beta finialy tagged my e-mail spammer as W32.Beagle@mm!zip

 

Any reolys? Infinity

carefull