Infection Blocked! popups keep coming » VBA:Downloader-DGL [Trj]

Viruses and worms
1

Hello! I continue getting multiple popups every day since I manually deleted an email I could see from the sender name and subject line in my Mac Mail client. I did not open the email. I right-clicked to delete.

However, this has been going on for over a week now. Avast tells me my computer is safe, but the popups are obnoxious now, and if there is a way to stop them, that would be great. Even better, if the culprit file is still on my machine, or installed something, I want to clean my machine. I have done scans with Avast, BitDefender, and asked my server host company to scan my account. Nothing is found. Is this a flaw in Avast on my machine?

Here’s the info on the popup:

Infection: VBA:Downloader-DGL [Trj]
Subject: Internship
From: “E SYLVIA DE LA” VEGA@email1.com
To: (my work email address … don’t want to put my email here)
File: 107.doc

I have followed the path listed in the popup and no such file is showing.

Thanks!

2

Post the required logs.https://forum.avast.com/index.php?topic=53253.0

3

Thanks, but David says not to post there?

4

Yes that is just instructions, you attach the logs here in this topic

Hello! I continue getting multiple popups every day since I manually deleted an email I could see from the sender name and subject line in my[b] Mac[/b] Mail client.
Is this a Mac ?
I have followed the path listed in the popup and no such file is showing.
And the path is? you may attach a screenshot of the popup
5

Peoples the OP said Mac Mail client.

Matt, seems the mail is still on the server and the mail client is trying to retrieve it every time you are using it.
Make sure the mail is removed from the companies server(s) as well as from the mail provider server(s).

6

Yes, this is a Mac. Looking at the referenced thread, that is for PC. I can’t run .exe files.

Eddy, I think you are right. I turned off Mail client and this morning, minutes after launching Mail, I got a popup, so it is only happening when Mail is accessing the server. Curious that my web host company didn’t find any bad files. This one must appear legit?