My computer is showing a file extension (.gy) that is present in every folder and attaches itself on any removable storage device. What can I do? Is it a virus?
by 
SammyZee
ANSWERS: 2
-
I did a search on known file extensions, updated to April 2006, with no result for .gy . There was one reference in a help file here http://developer.atlassian.com/jira/browse/SCRP-8 .If your up to date av scan didn't detect it as a virus, it's possible that it's : 1/A new program to online databases, they don't include it yet. 2/A file you have mistakenly renamed. 3/A problem file that needs to be examined by an expert. 4/It's also possible that it may be a file ,associated with a file that you created using unique software, that requires to be present to run on a different computer, through your removable drive. Sorry, that's the only way I could think of wording that.I don't have a degree in Journalism. Lol I'd try submitting it to your av software developer, if that feature is avaliable in your release. Failing that, I beleive you can submit it to Symantec for no charge analysis.
-
The .gy extention is used by Groovy, a language developed for a Java platform that you can read about here: http://groovy.codehaus.org/ As you may know, Java is often considered a security risk. And there is currently at least one worm in circulation that uses the .gy extention: WORM_MYTOB.GY You can see a bit about the worm here: http://www.trendmicro.co.jp/vinfo/virusencyclo/default5.asp?VName=WORM_MYTOB.GY This worm is also known as W32.Mytob.FI@mm and Net-Worm.Win32.Mytob.bi but after reading at several sites about it I'm not seeing anything about it that matches what you've described. However, the worm also attempts to open a back door to your computer, allowing someone in to do whatever they wish. It also attempts to prevent you from reaching the most common anti-virus sites, such as symantec.com and trendmico.com You might go ahead an try runninng Trend Micro's House Call to see what that comes up with. You'll find that here: http://housecall.trendmicro.com/ and if you have trouble getting to that page, it's a good indication that something virus-y is ging on. Beyond that, I don't know what to suggest.
RELATED QUESTIONS
Copyright 2023, Wired Ivy, LLC