Hi
Checking my email last night and it came across an email containing one of the the Netsky variant worms in an atachment, and each time I tried to delete or move to chest, it came back with a message saying unable to complete the action (or something along those lines), so in the end I had to close the virus alert window using the close control and then Shift+Delete the offending email. I then did a full system scan which found nothing so assume all is well, but am a bit concerned that I couldn’t stop the message from getting in - any clues as to what I can do in the future in this instance?
Regards
Martin
- What is you email program?
- What is your OS?
Was it the email scanner that detected it e.g. during an email download or during an on-demand scan?
Hi David
Yes, probably useful info [blush]
Windows XP (SP2)
Thunderbird
Detected during email download.
Thanks
Martin
Martin, recurring viruses could due to System Restore. If you find a virus keeps coming back after you delete it, it’s most probably infected the System Restore folder, the best way to solve this is to disable System Restore, reboot your machine and then enable it again. After all, run a full avast! scanning. System Restore cannot be disabled on Windows 9x.
Enable/Disable System restore on Windows ME: http://support.microsoft.com/default.aspx?scid=kb;en-us;Q264887
Enable/Disable System restore on Windows XP: http://support.microsoft.com/default.aspx?scid=kb;[LN];310405
Windows attempts to protect files that are deleted from the system folders (just in case it was an accident), so they can be restored if required.
The email scanner could be scanning a file already deleted by the Standard Shield (depending on your settings and your email program). If you’re using Windows XP I suggest a boot-time scanning: Start avast! > Right click the skin > Schedule a boot-time scanning. Select for scanning archives. Boot.
Thanks
The email in question had an attachment which is what I’m guessing was infected, and as I do not have the preview pane open nor did I open the attached file, I’m guessing all is well (although I’m sure nothing is guaranteed with viruses), but think that maybe I should do a boot-time scan just to be on the safe side…I guess turning off/on system restore wouldn’t do any harm either!
Thanks again
Regards
Martin
The likelihood is you are probably ok if you haven’t opened the attachment.
I would hold on the boot-time scan for a moment. Thunderbird doesn’t recommend you use the inbox as a general storage area as if an email is infected many AVs will delete the complete inbox file (and possibly more, I’m not a TB user).
If you have identified the infected email, delete it and then clear the deleted items folder (or whatever it is called in TB), move any other emails in the in box into a temp email folder.
I use my email inbox (OE) like an in-tray at work, the item comes in is actioned and moved to another storage location (email folder) in this case, personal, newsletters, receipts, registrations, etc. So if I lose my inbox there is little harm done, the email folder most likely to be deleted or become corrupt is your inbox.
Once you have saved/moved your other email from the inbox, you could schedule a boot-time scan.
Disabling system restore may not be an issue in the boot-time scan as windows isn’t running at the time of the scan, but it won’t do any harm.