Stinger Detected a Virus

[stewjack]

I am a noncommercial home user.

I downloaded and installed Avast antivirus software about two weeks ago.  Version 4.1 Build Mar 2004 (4.1.357)

I have not yet registered the program because I am learning how it works, and although I still can't get it to protect my incoming IMAP mail I though that my ?resident? protection and incoming pop mail was working fine.

I won't try and explain why I decided to run Stinger other than someone suggested that it wouldnt hurt because virus infestation is very high and many of my subscribed mailing lists are tramsmitting viruses.

http://vil.nai.com/vil/stinger/

Stinger Report Follows
------------------

McAfee AVERT Stinger Version 2.1.0 built on Mar  2 2004

Copyright (C) 2004 Networks Associates Technology, Inc. All Rights Reserved.

Virus data file v1000 created on Mar 2 2004.

Ready to scan for 39 viruses, trojans and variants.

Scan initiated on Sat Mar 06 22:10:46 2004

C:\WINDOWS\TEMP\trz9081.TMP

     Found the W32/Dumaru.y@MM virus !!!

C:\WINDOWS\TEMP\trz9081.TMP has been deleted.

C:\WINDOWS\TEMP\trz9233.TMP

     Found the W32/Dumaru.y@MM virus !!!

C:\WINDOWS\TEMP\trz9233.TMP has been deleted.

  Number of clean files: 42541

  Number of infected files: 2

  Number of files deleted: 2

----------------------------
Stinger Report Ends


I wonder if I should download and install a new copy of Avast.

Jack Stewart

[whocares]

Hi,

have you done a full thorough scan (including archives) of your whole PC before you ran stinger ?

avast can also be repaired; via control panel -> software -> change/remove avast (or something like this)

did you read the FAQ on avast's main page, the avast program help, and the various board topics on using/configuring Mailscanner ?
I'm not sure if IMAP mailscan is supported .. do you use maybe Imap with SSL ?

It seems as if dumaru wasn't active on your system, only dormant in some .TMP files;
to be sure, read the decription:
http://www.avast.com/i_idt_1446.html
and use avast'S cleaner (see above link)
 

[igor]

avast! Virus Cleaner doesn't currently detect Dumaru.
The files in the TEMP folder were left there by a previous version of avast! (e.g. as temporary files created during scanning of archives/e-mail) - i.e. they were not dangerous. It shouldn't happen anymore.

[whocares]

avast! Virus Cleaner doesn't currently detect Dumaru.

Hi Igor,

then you should correct your AV-info on Dumaru:
http://www.avast.com/i_idt_1446.html
(I only checked there, not on the Cleaner page, silly me )

[igor]

Oops, you are right.
Don't know how that info got there... I'll fix it. Thanks!

[stewjack]

Thank you for all the help.  I was certain that Avast was working because I download 2 to 3 viruses a day with my email.  It's almost always Swen.  

I was also quite certain that my resident protection was working, because when I let an email virus into my inbox, and then saved the attachment to a hard drive directory, alarms went off immediately.


Imap email protection
I use Netscape 7.1 (Mozilla) and it comes with a free imap mail account.  I never got a virus through that account.  The server name is imap.mail.netcenter.com but you can't modify the username.  It's probably like Juno.  It's a minor issue.