Avast vs Norton Findings In Email Folders

Viruses and worms
1

I have Norton 360 latest on Win 7. I recently had a virus scare because of popups (whitesmoke). After making a system image, I did complete scans with Norton, Malwarebytes, and Norton Power Eraser, which found nothing. I uninstalled the suspected program, and decided I should install Avast and try a scan. I did an Avast boot scan which only found infected emails in some old Outlook Express .dbx files I rarely access. I had Avast delete or quarantine the emails. Ran the boot scan again and it finds more and more dupes of one of the emails in the same and other .dbx files, and then eventually in the Windows temp folder. I get scared and restore the computer with the system image I made before installing Avast. Then I right click the folders containing the .dbx files and scan with Norton and Malwarebytes. They find nothing. They find nothing on complete scans either. Frankly I’m afraid to copy, delete, or move any of the OE .dbx files, for fear of touching off another chain reaction. Any suggestions? And does anyone know why Norton and Malwarebytes are finding nothing when the Avast experience indicates something pretty bad going on? As far as specifics, this is what Avast found (and I deleted or quarantined) on the first boot scan:

Win32:Malob-C (CRYP)
Win32:Beagle-CC (WRM)
HTML:Bankfraud-A (TRJ)
WIN32:SDBOT-BZI (TRJ) (in a zip, and a pif with a super long name with lots of spaces)

Second boot scan:

apparent dupes of WIN32:SDBOT-BZI in the same and other .dbx files, and in Windows Temp.

Frankly I’m afraid to do anything more even with Avast, because it only seemed it might continue on like this with possible replicaton through multiple boot scans. And I don’t know what the result of even sending files to Avast or Norton will be, as far as further replication being triggered in the process. (besides which the .dbx files contain personal emails I can’t send anyway.)

And Norton and Malwarebytes find nothing.

Any suggestions?

2

Hi Nobert,

According to what i ever met on my site,

Yes, avast will be detect the mail attachment which’s contains any suspicious documents.

As you know this is not a new attacks method anymore, they attached the exe file with hidden on PDF or some microsoft office file format.
So each time if the victim open the attachment, then automatically the malware will be run behind of your system background.

Some of them sent the email with subject from DHL or Fedex or maybe your financial department includes with some attachment file. If you curious to know more about them, you may try to download, but please don’t open the file and you may try to see the file details with right-click and choose properties.

Here is the one an examples that user shared : hxxp://www.ambruceli.com/malware-from-fake-dhl-email-attachment/

Anyway, malwarebytes for free is doesn’t includes with real-time protection and only support for on-demand scan feature. Also Malwarebytes doesn/t have a feature to scan the file which attached on the email as well and different with avast antivirus.

cheers,

3

have you tested the file(s) at www.virustotal.com

running multiple AV programs can create all kind of mysterious windows errors and false positive detections

Never install two AV programs (see reply from quietman7)
http://www.bleepingcomputer.com/forums/index.php?s=7c8217673a726b92cfc91ecfd4294a29&showtopic=260844&view=findpost&p=1441638

4

Thank you both. I’ll regroup and try again with this new information.