[vrtclsmile]

Once again, you guys deserve all the thanks and praise, for sticking this thing through.

Oh, and it doesn't appear to have been a "pron" site that did all the dirty deeds - it looks like he got rooked into clicking one of those "free" poker sites that offer to start you off with $100, then you're cooked.

I'll miss you guys, though. Maybe we should get together for a beer now and then.....



Many, many thanks!!!!!!!

[Advertisements]

And - LOOK! Just this problem alone has made me a "Senior Member"!

And at MY age!

[vrtclsmile]

And - LOOK! Just this problem alone has made me a "Senior Member"!

And at MY age!

[Metallica]

Give junior his own computer to play Russian poker with.

I might take you up on this one although I have stopped drinking years ago.

And it's perfectly OK to hang out here without having computer problems.

Regards,

[vrtclsmile]

Pieter - I am sending another file (zipped) called InstallEx.exe - it looks equally suspicious and its date and time stamp are virtually the same as the last file. Please check it and let me know.

Thanks -

Jerry

[Metallica]

Recognized by none of the scanners. One warning:
AntiVir found Heuristic/Trojan.Downloader (probable variant)
this file was only flagged as malware by heuristic detection. This might be a false positive.

I will do some more research, but given the time of creation I would advise you to rename it from InstallEx.exe to InstallEx.bak

Regards,

[vrtclsmile]

Will do - thanks!

[Metallica]

I sent it out to several AT and AV vendors. After having a short look and finding some Ezula/Coupondeals CLSID's inside.

I'll keep you posted if anyone cares to share some information.

Regards,

Pieter