E-Mail detection? - Mischel Internet Security Forum

Jobs | About | Blog | Contact

Download TrojanHunter Now
Free 30-day trial!

Latest TrojanHunter Version:
TrojanHunter 5.0

Order Now
License file delivered within minutes.

Welcome, Guest. Please Login or Register.

Jul 4^th, 2008, 2:40pm

   Mischel Internet Security Forum
   Malware
   Adware, Browser Hijackers and other Malware (Moderators: Helena, Gavin_Coe, Magnus)
   E-Mail detection?

« Previous topic | Next topic »

Pages: 1

Notify of replies

Send Topic

Author

Topic: E-Mail detection? (Read 849 times)

fjwag3
Newbie

Posts: 27

E-Mail detection?
« on: Jul 27^th, 2006, 6:42pm »

Quote

Modify

Hi

Ok, today Bit Defender detected three viruses, would not remove or quarantine 'em though. Anti-Vir Personal Edition Classic removed a file saying it had the signature of the Windows Virus W32/unnamed.10752.

Trojan Hunter, AntiVir PE and others say I'm clean, but Bit Defender still has a detection. False positive hopefully? The e-mail messages in question are very old, this is a new one for me!

Summary:

C:\Documents and Settings\Owner\Application Data\Thunderbird\Profiles\q13l9tqb.default\Mail\Local Folders\Sent=>(message 28)
Infected Generic.PWStealer.8BC494F8
C:\Documents and Settings\Owner\Application Data\Thunderbird\Profiles\q13l9tqb.default\Mail\Local Folders\Sent=>(message 28)
Move failed
C:\Documents and Settings\Owner\Application Data\Thunderbird\Profiles\q13l9tqb.default\Mail\Local Folders\Sent=>(message 61)
Infected Generic.PWStealer.A5B54CB6
C:\Documents and Settings\Owner\Application Data\Thunderbird\Profiles\q13l9tqb.default\Mail\Local Folders\Sent=>(message 61)
Move failed
C:\Documents and Settings\Owner\Application Data\Thunderbird\Profiles\q13l9tqb.default\Mail\Local Folders\Sent=>(message 70)
Infected Generic.PWStealer.D70AB4E5
C:\Documents and Settings\Owner\Application Data\Thunderbird\Profiles\q13l9tqb.default\Mail\Local Folders\Sent=>(message 70)
Move failed

regards
#3

« Last Edit: Jul 27^th, 2006, 6:43pm by fjwag3 »

IP Logged

siliconman01
Global Moderator

Trojans! Chew 'em Up, Spit 'em Out...

Gender: male

Posts: 5462

Re: E-Mail detection?
« Reply #1 on: Jul 28^th, 2006, 12:58am »

Quote

Modify

Would you please submit these e-mails along with any attachments that are with them to Mischel for analysis. The link below explains how to submit a file.

http://forum.misec.net/board/FAQ/1139308293

Gavin or Magnus will analyze them and incorporate ruleset detections if they are in fact malicious.

As for as whether BitDefender has a false positive rule, here is a forum address for BitDefender. Perhaps they can answer that question for BitDefender.

http://bitdforum.com/index.php

IP Logged

______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!

fjwag3
Newbie

Posts: 27

Re: E-Mail detection?
« Reply #2 on: Jul 28^th, 2006, 3:30am »

Quote

Modify

on Jul 28^th, 2006, 12:58am, siliconman01 wrote:

Ok thanks but I cannot find any files to submit! I will post at the BD forum.

IP Logged

siliconman01
Global Moderator

Trojans! Chew 'em Up, Spit 'em Out...

Gender: male

Posts: 5462

Re: E-Mail detection?
« Reply #3 on: Jul 28^th, 2006, 4:27am »

Quote

Modify

Can you see the folders/files if you do what it described at this link?

http://forum.misec.net/board/FAQ/1139610900

IP Logged

______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!

fjwag3
Newbie

Posts: 27

Re: E-Mail detection?
« Reply #4 on: Jul 28^th, 2006, 12:37pm »

Quote

Modify

Posted at the BD forum, they move fast! With the update this morning there is no detection, so ring it up as a false positive. I check my system daily with multiple software so I was sorta kinda sure it was a false positive Grin