"generic.peed"--which E-mail Message?

Hi. I had a scan pick up a "Generic.Peed" virus and the path shows what mail message in Thunderbird is infected, but it can't disinfect/delete the message. Is there a way to find that particular message # through a search within Thunderbird to delete that particular message directly? I looked at the headers of some messages, but I can't seem to find where a similar message # is in that text. My mail file is very big, so opening it in a text editor would probably be impractical.

Thanks in advance...

A E

Find more posts tagged with

Comments

Cristi Raducu

Hello A E,

Please post the deep system scan log here.

vidgames

Hello A E,

Please post the deep system scan log here.

Product: BitDefender Internet Security 2010

Version: BitDefender Antivirus Scanner

Scanning task: System Scan

Log date: 4/3/2010 1:00:03 AM

Log path: C:\Documents and Settings\All Users\Application Data\BitDefender\Desktop\Profiles\Logs\full_scan\1270281603_1_02.xml

Scan paths:

Path 0000: C:\

Scan Level:

Scan for viruses: Yes

Scan for adware: Yes

Scan for spyware: Yes

Scan for applications: Yes

Scan for dialers: Yes

Scan for rootkits: No

Scan for keyloggers: Yes

Virus Scanning Options:

Scan registry keys: Yes

Scan cookies: Yes

Scan boot sectors: Yes

Scan memory processes: Yes

Scan archives: No

Scan runtime packers: Yes

Scan e-mails: Yes

Scan all files: Yes

Heuristic Scan: Yes

Scanned extensions: not configured

Excluded extensions: not configured

Target Processing:

Default first action for infected objects: Disinfect

Default second action for infected objects: None

Default first action for suspect objects : None

Default second action for suspicious objects: None

Default action for hidden objects: None

Default first action for encrypted infected objects: Disinfect

Default second action for encrypted infected objects: None

Default first action for encrypted suspicious objects: None

Default second action for encrypted suspicious objects: None

Default action for password-protected objects: Log only

Scan Engines Summary

Virus signatures: 5576452

Archive plugins: 44

E-mail plugins: 6

Scan plugins: 13

System plugins: 5

Unpack plugins: 8

Basic

Scanned items: 360150

Infected items: 1

Suspect items: 0 (no suspected items have been detected)

Hidden items: 0 (the scan options do not include scanning for rootkits)

Resolved items: 0 (infected or suspect items have been found and were ignored or could not be fixed)

Unresolved items: 1

Advanced

Scan time: 01:36:14

Files per second: 62

Skipped items: 5798

Password-protected items: 0

Over-compressed items: 0

Individual viruses found: 1

Scanned folders: 10446

Scanned boot sectors: 2

Scanned archives: 128872

Input-output errors: 31

Scanned processes: 44

Infected processes: 0

Scanned registry keys: 801

Infected registry keys: 0

Scanned cookies: 41

Infected cookies: 0

Remaining issues:Object Path Threat Name Final Status

C:\Documents and Settings\Andy Eddy\Application Data\Thunderbird\Profiles\h6qm9pb8.default\ImapMail\mail.eddyink.com\INBOX=>(message 38137) Generic.Peed.Eml.6C43F4E4 Delete failed (archive could not be repacked)

vidgames

bump...

Cristi Raducu

What you can try to find out the email subject is to go to: C:\Documents and Settings\Andy Eddy\Application Data\Thunderbird\Profiles\h6qm9pb8.default\ImapMail\mail.eddyink.com\ right click on INBOX and select Scan with BitDefender.

After the scan is over,check if the correct information is shown.

Cristi.

vidgames

What you can try to find out the email subject is to go to: C:\Documents and Settings\Andy Eddy\Application Data\Thunderbird\Profiles\h6qm9pb8.default\ImapMail\mail.eddyink.com\ right click on INBOX and select Scan with BitDefender.

After the scan is over,check if the correct information is shown.

I did scan the INBOX file as you suggested. Interestingly enough, it found six problems this time, and I was able to mouse over each one to find a [subject:] line I could search in Thunderbird...though the "generic.peed" one was an exception--it doesn't show more than the path and message number. I've attached a screen of it so you can see for yourself. I got rid of the other issues by going to those messages and deleting them directly.

What should I do now?

A E

Cristi Raducu

BitDefender found 6 items this time because the previous scan was a full scan(system scan) and not a deep scan.

The screenshot message shows that your only option is move the file to quarantine.

Did you take this action and what happened?

I recommend you to create a copy of the INBOX file prior to selecting: Move to quarantine.