Alloneword 2 Posted May 1, 2014 Share Posted May 1, 2014 I'm having trobles getting rid of 29 infections, i have not bothered about it much as ESETSS seems to be able to delete the harmfull files and i'm just left with the text of the email but after running scan today i don't get an option to delete them this is what the scan log shows. Scan Log Version of virus signature database: 9745 (20140501) Date: 01/05/2014 Time: 14:46:35 Scanned disks, folders and files: Operating memory;Boot sector;C:\Boot sector;C:\ C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\ESET Antispam » MBOX » mail000.eml » MIME » MIME » tax_announcement.docx.zip » ZIP » tax_announcement.docx.scr - Win32/TrojanDownloader.Small.PSD trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\ESET Antispam » MBOX » mail001.eml » MIME » MIME » Receipt23april2014.zip » ZIP » Receipt23april2014.rar.scr - Win32/TrojanDownloader.Small.ADP trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\ESET Antispam » MBOX » mail002.eml » MIME » MIME » Receipt23april2014.zip » ZIP » Receipt23april2014.rar.scr - Win32/TrojanDownloader.Small.ADP trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\ESET Antispam » MBOX » mail003.eml » MIME » MIME » Postal_Receipt.zip » ZIP » Postal_Receipt.zip.scr - Win32/TrojanDownloader.Small.ADP trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\ESET Antispam » MBOX » mail004.eml » MIME » MIME » Detailed_Invoice_04_14.zip » ZIP » Detailed_Invoice_04_14.zip.scr - Win32/TrojanDownloader.Small.ADP trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\ESET Antispam » MBOX » mail005.eml » MIME » MIME » Payment_notice.zip » ZIP » Payment_notice.rar.scr - Win32/TrojanDownloader.Small.ADP trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\ESET Antispam » MBOX » mail006.eml » MIME » MIME » ScanNotice28apr.zip » ZIP » ScanNotice28apr.jpg.scr - Win32/TrojanDownloader.Small.PSD trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Inbox » MBOX » mail449.eml » MIME » MIME » tax_announcement.docx.zip » ZIP » tax_announcement.docx.scr - Win32/TrojanDownloader.Small.PSD trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Inbox » MBOX » mail464.eml » MIME » MIME » Receipt23april2014.zip » ZIP » Receipt23april2014.rar.scr - Win32/TrojanDownloader.Small.ADP trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Inbox » MBOX » mail469.eml » MIME » MIME » Receipt23april2014.zip » ZIP » Receipt23april2014.rar.scr - Win32/TrojanDownloader.Small.ADP trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Inbox » MBOX » mail474.eml » MIME » MIME » Postal_Receipt.zip » ZIP » Postal_Receipt.zip.scr - Win32/TrojanDownloader.Small.ADP trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Inbox » MBOX » mail475.eml » MIME » MIME » Detailed_Invoice_04_14.zip » ZIP » Detailed_Invoice_04_14.zip.scr - Win32/TrojanDownloader.Small.ADP trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Inbox » MBOX » mail501.eml » MIME » MIME » Payment_notice.zip » ZIP » Payment_notice.rar.scr - Win32/TrojanDownloader.Small.ADP trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Inbox » MBOX » mail567.eml » MIME » MIME » ScanNotice28apr.zip » ZIP » ScanNotice28apr.jpg.scr - Win32/TrojanDownloader.Small.PSD trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Inbox » MBOX » mail570.eml » MIME » MIME » ScanNotice28apr.zip » ZIP » ScanNotice28apr.jpg.scr - Win32/TrojanDownloader.Small.PSD trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Inbox » MBOX » mail572.eml » MIME » MIME » ScanNotice28apr.zip » ZIP » ScanNotice28apr.jpg.scr - Win32/TrojanDownloader.Small.PSD trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Inbox » MBOX » mail601.eml » MIME » MIME » Paym.Receipt.zip » ZIP » Paym.Receipt.doc.scr - Win32/TrojanDownloader.Small.PSD trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Inbox » MBOX » mail602.eml » MIME » MIME » Paym.Receipt.zip » ZIP » Paym.Receipt.doc.scr - Win32/TrojanDownloader.Small.PSD trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Trash » MBOX » mail092.eml » MIME » Notice_8.04.2014.xls.zip » ZIP » Notice_8.04.2014.xls.scr - Win32/TrojanDownloader.Small.PSD trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Trash » MBOX » mail093.eml » MIME » Notice_8.04.2014.xls.zip » ZIP » Notice_8.04.2014.xls.scr - Win32/TrojanDownloader.Small.PSD trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Trash » MBOX » mail186.eml » MIME » MIME » tax_announcement.docx.zip » ZIP » tax_announcement.docx.scr - Win32/TrojanDownloader.Small.PSD trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Trash » MBOX » mail195.eml » MIME » MIME » Receipt23april2014.zip » ZIP » Receipt23april2014.rar.scr - Win32/TrojanDownloader.Small.ADP trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Trash » MBOX » mail197.eml » MIME » MIME » Receipt23april2014.zip » ZIP » Receipt23april2014.rar.scr - Win32/TrojanDownloader.Small.ADP trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Trash » MBOX » mail198.eml » MIME » MIME » Detailed_Invoice_04_14.zip » ZIP » Detailed_Invoice_04_14.zip.scr - Win32/TrojanDownloader.Small.ADP trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Trash » MBOX » mail199.eml » MIME » MIME » Postal_Receipt.zip » ZIP » Postal_Receipt.zip.scr - Win32/TrojanDownloader.Small.ADP trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Trash » MBOX » mail207.eml » MIME » MIME » Payment_notice.zip » ZIP » Payment_notice.rar.scr - Win32/TrojanDownloader.Small.ADP trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Trash » MBOX » mail232.eml » MIME » MIME » ScanNotice28apr.zip » ZIP » ScanNotice28apr.jpg.scr - Win32/TrojanDownloader.Small.PSD trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Trash » MBOX » mail233.eml » MIME » MIME » ScanNotice28apr.zip » ZIP » ScanNotice28apr.jpg.scr - Win32/TrojanDownloader.Small.PSD trojan C:\Users\Home-Brew\AppData\Roaming\Thunderbird\Profiles\5f6ma3ri.default\Mail\Local Folders\Trash » MBOX » mail244.eml » MIME » MIME » Paym.Receipt.zip » ZIP » Paym.Receipt.doc.scr - Win32/TrojanDownloader.Small.PSD trojan Number of scanned objects: 327512 Number of threats found: 29 Number of cleaned objects: 0 Time of completion: 15:31:44 Total scanning time: 2709 sec (00:45:09) Notes: [4] Object cannot be opened. It may be in use by another application or operating system. Any advice is welcome. All1 Link to comment Share on other sites More sharing options...
Administrators Solution Marcos 4,704 Posted May 1, 2014 Administrators Solution Share Posted May 1, 2014 Basically you needn't do anything as it's infected emails that were detected in your Thunderbird MBOX files and are benign in this form. They would be detected by real-time protection upon an attempt to extract them. You removed them as follows: - empty "ESET Antispam" folder - empty "Trash" folder - look up emails with zip attachments listed in the log in the Inbox folder and delete them. Link to comment Share on other sites More sharing options...
Alloneword 2 Posted May 1, 2014 Author Share Posted May 1, 2014 Thanks Marcos it has worked like a charm. All1 Link to comment Share on other sites More sharing options...
Recommended Posts