Hi,

the avast report/log should clarify things:
in the full path of the infected file, you might even find the emails subject, thus you can identify it…

If not, try this:
a)
read up the virus description and try to identify the mails via size/subject; Link to “VirusInfo” below in my Sig.

b)

with emailscan & autoclean enabled; pause avast shields for this…

:wink: