All systems are go today…overnight full scan by Avira didnÂ´t find anything else…the exe is still in quarantine for now.
@SeÃ¡n: yeah, what you said makes sense…it delivered the file but nothing was activated. The thing was animated, probably a gif as you suggested…but what kept me from going with it was the update packet included its source address which identified it as coming from the Czech Republic! (hard to see, but there in the screenshot). I thought, since when do MS security updates come from there??? Then I looked at the top of the screen and saw that I was on a completely different site than I thought I had just clicked to…also Czech Republic. Naturally I didnÂ´t try to run or install it. Avira did itÂ´s job very well…hats off to them!
What was most “impressive” about this attack was the way it was able to totally emulate how my “My Computer” looks when opened. Was this sheer luck? Or was it able to see what skin I use, that I have just a “C drive” and no “D drive” etc???
@ Mciahel: Not sure what a “live CD” is…?