Secret.cpl

  • Thread starter Thread starter Gary
  • Start date Start date
What makes you think its a virus?
Do you have an A/V program which detects it?
Have you tried an external online scan?
 
Gary said:
Greetings...

Anyone have any experience with a virus that sends secret.cpl as an
attachment? Only reference I found is
http://securityresponse.symantec.com/avcenter/venc/data/w32.arcam.html The
strange thing is, it is coming from email address in my own domain. And I
know that no one in my domain has used their email today. Very strange.

Thanks

Gary

It's possibly W32/Bagle.AG http://vil.nai.com/vil/content/v_126795.htm
, ( although filename alone is not always a good indication of what
the file contains. )

It's been speading quite well in the last cpl of days.

It spoofs email addresses. Read more at the McAfee description above.
 
Appears to be the Bagle virus. And I know that it spoofs the email address,
It was just odd that it only seemed to be coming from my domain. I'm
surprised my antivirus program didn't flag it. I'll just keep my eye out and
see if I get any more.

Gary
 
I suspect it's a virus because I know the person (my wife) did not send an
email with a .cpl attachment. So, I figured it was an email message with a
spoofed address. My antivirus program did not identify it, which is unusual.
I have a server based virus program that is very reliable. So just thought
I'd ask a few knowledgeable folks.

Thanks
Gary
 
You still don't say what A/V you are using or if it its definitions are up
to date.
In any case, if it does turn out to be Bagle (or any of the common ones
circulating atm) your A/V program may not be as good as you thought, and its
your 'safe hex' which is saving you.
The spoofed address is almost a 'given' for most viruses/worms these days.
All it means is the infected machine contains both you and your wife's email
addresses.
 
I just recieved an email from someone with the subject line of RE:. It
had a Dog.cpl file attached to it. Something is making the rounds.
 
Back
Top