Peed Variants And Proper Disinfection In Harmless Files

studleylee
studleylee ✭✭
edited October 2007 in Malware talk

I have a similar problem to another post( Nabil ), with my Eudora In.mbx All attachments scan fine and are clear. Eudora's mailboxes are html text based, but I could not correlate the " =>(message XXXX) " to actual text lines since some of the emails are digests. It's irritating the program can't pin-point with more detail what's causing the


virus alert, and the tech support response was like a broken idiocy recording: Their response " you have a virus in your *.mbx files" Please scan them with Bitdefender and email the logs. Which is what I did in the first place, if they had looked at the email. Trashing the entire mailboxes is not an option. I copied it to a mybox.txt file and scanned that and it came up with the same virus alert. Yeah like that text file is really going to do something. Tells me it just a keyword they are triggering on so I can't believe it couldn't disinfect or even move! the file. It's ridiculous.


QUOTE(Nabil @ Oct 4 2007, 11:36 AM)


Hmm, I have exactly the same problem except that I use Thunderbird and I do use the program for my email. The 2 emails are not identified in way that helps me locate them and deleting all my emails is not an option. Here's the relevant bit


\Thunderbird\Profiles\ffronnrh.default\ImapMail\mail.zuumedia.com\INBOX=>(message 5794) Infected: Generic.Peed.Eml.24569595


\Thunderbird\Profiles\ffronnrh.default\ImapMail\mail.zuumedia.com\INBOX=>(message 5794) Disinfection failed


\Thunderbird\Profiles\ffronnrh.default\ImapMail\mail.zuumedia.com\INBOX=>(message 5794) Move failed


\Thunderbird\Profiles\ffronnrh.default\ImapMail\mail.zuumedia.com\INBOX=>(message 5795) Infected: Generic.Peed.Eml.24569595


\Thunderbird\Profiles\ffronnrh.default\ImapMail\mail.zuumedia.com\INBOX=>(message 5795) Disinfection failed


\Thunderbird\Profiles\ffronnrh.default\ImapMail\mail.zuumedia.com\INBOX=>(message 5795) Move failed


I did try opening inbox in notepad and did a search for message 5794, no such thing. Any idea what I should do?


Thanks


Nabil

Comments