Recently noticed that the Avast mail scanner icon in system tray is on when my machine starts up even though there are no mail programs running and hovering over it shows various addresses. I have switched on the “Show detailed info on performed action” in Advanced settings under “Internet Mail” in Avasts “On Access Protection Control”
Now I can see info on emails being sent from my machine which include subjects like “Increase your sperm” and “Saving Hundred Dollars, Deep Discount Medicines/Pills”.
I have run a full Avast sweep and a Webroot Spysweeper scan but still the same.
Did you manage to isolate some of these files, as sending the samples to avast for analysis and hopefully inclusion in the VPS would improve detection and help others ?