unable to delete infected mail

[Atoma740]

when retreiving mail and a infected mail is detected i get the Avast Warning telling me a mail is infected with a virus...so far so good, then when i try to delete the message (tried delete permant or to recycle bin)  i get the following message "Avast' : There are no more Files , cannot proces "email"use this patch immediately ! "From Microsoft <security@microsoft.com>, To <my mailadres> \patch exe\patch.exe" file

Tried to reinstall Avast without results.

Anyone any ideas how to solve this

[Vlk]

What mail client are you using? And is this on English or another-language version of Windows?

[Atoma740]

using Windows Xp home Ed. - dutch
Avast 4.0 - dutch
Outlook Express Dutch

I guess the problems must started after trying some other mail-clients like Mozilla Thunderbird, Foxmail, Eudora, but everything is uninstalled.

in the meanwhile i've set OE als default mail client; maybe that solves the problem.

[Vlk]

Uhm, avast 4 Dutch?? Where did you get it? It has not been officially released yet!

What version is it, exactly? (see the About box).

Thanks Vlk

[Atoma740]

oeps Avast 4.0 build Oct2003 (4.1.280) english version of course.


http://users.skynet.be/bk342901/avasterror.html

[techie101]

when retreiving mail and a infected mail is detected i get the Avast Warning telling me a mail is infected with a virus...so far so good/quote]
W4, Did Avast provide the name of the virus?

then when i try to delete the message .........  i get the following message "Avast' : There are no more Files , cannot proces "email"use this patch immediately !

[/color]
Apparently, when you clicked Delete, you had to indicate which email to delete.  In OE, the window will open the message before sending it into the Delete directory .

"From Microsoft <security@microsoft.com>, To <my mailadres> \patch exe\patch.exe" file

This worries me.  Microsoft is not in the habit of emailing users with patches!  There have been phony emails containing the MS header which are actually virus transmissions.

Tried to reinstall Avast without results.

Why did you uninstall Avast?  What AV do you now have installed?

It is most important, that you run a full system scan.
You can use online scanners for now to make sure you system is clear of any and all virii.
(www.panda.com or www.kaspersky.com are 2 that I have used successfully)

techie

[Atoma740]

1/ yep avast provides a name for the virus Win32:Dumara-H[Wrm]
2/ i can't see the mail until i ignore to take action on the virus. Then the mail is coming in (uncleaned) and manually have to remove the mail from the inbox.
3/ the mail is not comming from MS itself, like you said, it's always a phony email adress
4/ installed Avast4 again. did a scan of the system and seems to be clean.

I'll try one of those online scanners to get a second opinion.

[techie101]

W4,

Actually, the correct name is Dumaru.?  (?=various variant designations a/b/c etc.)
It ends processes belonging to antivirus programs, firewalls and system monitoring tools. It drops a backdoor Trojan on the affected computer.
 
To be sure it has been removed, you can download the free removal tool from Symantec:
http://securityresponse.symantec.com/avcenter/tools.list.html

(OR)

the Stinger from McAfee:
http://us.mcafee.com/virusInfo/default.asp?id=stinger

then read this article from McAfee.....Sound familiar?
http://us.mcafee.com/virusInfo/default.asp?id=helpCenter&hcName=dumaru

Good luck,
techie

[Atoma740]

problem still isn't solved.  

tried stinger from McAfee and the removal tool from Symantec. the system is clean of viruses. Also did a scan with the online scanner from Bitdefender. No virus was found.

Guess i'll have to switch to another virusscanner  :'( (at least until the next reinstall of Xp) Anyone any experience with AVG or Antivir H+BEDV ? Wich one is the most reliable ?

[techie101]

W4,

What problem are you still having?  I thought you had successfully removed the virus?
If so, wasn't the "alert" the problem?
I am not sure what problem you now want us to solve.  

Can you explain?  I'm sure we can help.

As for an anti-virus program, I have found AVG by Grisoft reliable in W98, ME and XP systems.  Its' virus detection rate cannot compare with Avast, but it does have a resident email scanner.  The free version does not have the auto update feature that Avast uses.

You can review Virus Bulletin's data on most anti-virus programs if you wish before selecting www.virusbulletin.com

techie

[Lisandro]

when retreiving mail and a infected mail is detected i get the Avast Warning telling me a mail is infected with a virus...so far so good, then when i try to delete the message (tried delete permant or to recycle bin)  i get the following message "Avast' : There are no more Files , cannot proces "email"use this patch immediately ! "From Microsoft <security@microsoft.com>, To <my mailadres> \patch exe\patch.exe" file

Tried to reinstall Avast without results.

Anyone any ideas how to solve this

avast! have solved your virus infection as I can see...
Remember what techie said, Microsoft does not send email with patches!
This is actually a kind of virus transmission.  

[Atoma740]

Never said i had a virus on the system, the problem is that i can't delete mails that are intercepted with Avast Mail scanner. I took some screenshots so it may be more clearly now where the problem is.

http://users.skynet.be/bk342901/avasterror.html

[Lisandro]

Never said i had a virus on the system, the problem is that i can't delete mails that are intercepted with Avast Mail scanner. I took some screenshots so it may be more clearly now where the problem is.

http://users.skynet.be/bk342901/avasterror.html

avast! will have the following behavior (depending of your settings):
1. If just the attach is infected, it will be deleted (if you set so) and a not will be posted in the body of the message (see your pictures).
2. If both attach and body are suspiciuos, you will be prompted do delete all the message (body and attach).

If I'm wrong, avast! team will correct me.
In Professional version, this settings could be fully configurated. In Home, some of them are default.  

[Lito]

when retreiving mail and a infected mail is detected i get the Avast Warning telling me a mail is infected with a virus...so far so good, then when i try to delete the message (tried delete permant or to recycle bin)  i get the following message "Avast' : There are no more Files , cannot proces "email"use this patch immediately ! "From Microsoft <security@microsoft.com>, To <my mailadres> \patch exe\patch.exe" file

Tried to reinstall Avast without results.

Anyone any ideas how to solve this

That happened to me just a few minutes ago , and it was with an email infected with Dumaru-A. When I choose delete, i received the same error message saying "There are no more Files"

If anybody wants the file to make tests, I can send it

Cheers, and sorry for my bad english.

[sedina]

Hi guys,
please send problematic e-mails to sedina@asw.cz. I will check it and find where is the problem... One note: do you choose operation on e-mail immediately after the message in shown or there is some time-delay (e.g. 5 minutes)?

thanks!

pavels