False Postive. I Can't send emails whith Tunderbird.

Avast Free Antivirus / Premium Security
1

Hi, first of all, sorry for my bad English.

I have Avast 4.8 in my personal computer. Since a few days avast block my
output mails. I cant’t send a email!!!

The alert say:

26/08/2009 18:42:43 Milton Bianchi 1368 Sign of “HTML:Iframe-inf” has been
found in “C:\DOCUME~1\MILTON~1\CONFIG~1\TEMP\nsmail.eml” file.
26/08/2009 18:43:16 Milton Bianchi 1368 Sign of “HTML:Iframe-inf” has been
found in “C:\DOCUME~1\MILTON~1\CONFIG~1\TEMP\nsmail.eml” file.
26/08/2009 18:53:55 Milton Bianchi 1368 Sign of “HTML:Iframe-inf” has been
found in “C:\DOCUME~1\MILTON~1\CONFIG~1\TEMP\nsmail.eml” file.
26/08/2009 18:56:11 Milton Bianchi 1368 Sign of “HTML:Iframe-inf” has been
found in “C:\DOCUME~1\MILTON~1\CONFIG~1\TEMP\nsmail.html” file.
26/08/2009 19:44:31 Milton Bianchi 1536 Sign of “HTML:Iframe-inf” has been
found in “C:\DOCUME~1\MILTON~1\CONFIG~1\TEMP\nsmail.html” file.
26/08/2009 19:51:36 Milton Bianchi 1356 Sign of “HTML:Iframe-inf” has been
found in “C:\DOCUME~1\MILTON~1\CONFIG~1\TEMP\nsmail.html” file.
26/08/2009 19:54:34 Milton Bianchi 1356 Sign of “HTML:Iframe-inf” has been
found in “C:\DOCUME~1\MILTON~1\CONFIG~1\TEMP\nsmail.html” file.
26/08/2009 19:55:35 Milton Bianchi 1356 Sign of “HTML:Iframe-inf” has been
found in “C:\DOCUME~1\MILTON~1\CONFIG~1\TEMP\nsmail.html” file.
26/08/2009 20:01:02 Milton Bianchi 1356 Sign of “HTML:Iframe-inf” has been
found in “C:\DOCUME~1\MILTON~1\CONFIG~1\TEMP\nsmail.eml” file.
26/08/2009 20:01:40 Milton Bianchi 1356 Sign of “HTML:Iframe-inf” has been
found in "Correo saliente ‘ssadasd’ De: Milton Bianchi
mbianchi@softpoint.org, Para:…

And this file are Temporary files created by Thunderbird when sending a
message; this file not are a virus!!!

What can I do to continue working with avast and Thunderbird???

Thunderbird version: 2.0.0.23
SO: Windows XP Professional with SP3.

Thanks in advance

2

I have the identical setup with never a problem. Better check it out further.

3

So are you using iframes in your email ?

As the Sign of “HTML:Iframe-inf” is an indication of an injected iframe in the source of the email.

Check the source code of the emails and see if there is an iframe tag and what are the contents of that tag, e.g. where is it pointing ?

Note:
When posting URLs to suspect sites, change the http to hXXp so the link isn’t active (clickable) avoiding accidental exposure.

4

I found a virus o similar that include this tags in html files;
how can i remove the virus/malware?? The avast don`t find a virus!!!

5

It may be hidden or undetected, so you could start by trying these options.

If you haven’t already got this software (freeware), download, install, update and run it and report the findings (it should product a log file).

Don’t worry about reported tracking cookies they are a minor issue and not one of security, allow SAS to deal with them though. - See http://en.wikipedia.org/wiki/HTTP_cookie.

6

Tracking Cookies wouldnt be worried so if you want u can only do a scan with Malwarebytes as in my eyes they are both got the same option if im not wrong.

7

Yes you are wrong.

I said not to worry about tracking cookies, but that isn’t the only thing SAS looks for so ‘both’ scans should be done otherwise I wouldn’t have bothered to include both.

8

Well i only got Malwarebytes and its done more great than SAS. So in my term its not so usefull. Malwarebytes is still can catch some and Avast! can do his bootscan after that for see if there some. Also like me i can also do a scan with Windows Defender if he find something… For be sure. ;D

Like i can see Malwarebytes and SuperAntiSpyware is about all the same also for my use. And i wont worry even if i didnt got SAS. I got Avast! with MBAM and its all i can say i need. And for sure MBAM alone can own a lot too.

Mr.Agent

9

We are not talking about what you may or may not have found, but what might be on the original posters system. So if you haven’t even got SAS how can you offer any advise on it one way or another.

That is why when giving advice to someone else it is best not to use supposition.

If avast doesn’t find it in a conventional scan it is hardly likely to find it on a boot-time scan using the same signatures.

10

Well that why i say if Avast! didnt find it for sure now a day i can say i got Malwarebytes and Windows Defender as backup. Even if Windows Defender later is ended i got Malwarebytes also. I did see in their web that its about the exact job that SAS do like Malwarebytes on demand. And SAS Interface for me look really not friendly and hard to configure. So that why i use Malwarebytes its really nice and fast. So i can say im enought happy to what i got and i know u didnt talk about what i should got or no. But me i can say 1 or 2 of them or both its the choice of the user to decide.

You understand ? :wink:

Mr.Agent

11

Look I couldn’t care less, what we are trying to do is help the original poster not take this in a different direction off-topic.

12

Typical French-Canadian logic!

Agree with me because I was here first and this is my domain.

There are more experts here than you can comprehend so start to listen instead of declaring one application is the best and only thing you need!

13

I can agree we can suggest something with Avast! but we wont decide for them for sure because it his cpu ;D

14

What are you talking about, the CPU (Central Processing Unit, the main computer chip) has nothing to do with this.

We aren’t suggesting something with avast but trying to ensure that if there is a possibility of other malware we run multiple applications to ensure the best possible chance of detection, relating to his Reply #3.

When you are in a hole it is best to stop digging.

15

Yeah like me i use Avast! with Malwarebytes so Malwarebytes can tell me sometime some great news for what Avast! did not find.

16

Hi, I just find a solution for my PC.

I have infected whit the virus W32.VIRUT.CF

My question is: Why avast don´t detect ths virus??? WHY??? I have my pc “full infected” with that virus.

The solution: INstall Norton 2008 and scan all my pc and clean the infected file.

Now, I’m thinking If avast is a best solution. I lost many days and works…