In the last days, at random times, Avast 4 pro detects a lot of similar mail getting out (obviously I was not sending anything). After that I receive a lot of “Mail Delivery error”. The addresses in those mails are not in my address book.
A complete full scan of the system with Avast a few days ago did not reveal any mass mailer worm installed.
Similar complete scans with Pest Patrol, Spybot S&D and Adaware did not reveal anything.
This morning at about nine same Avast message of similar emails getting out at rapid pace. Some of them had attachements that Avast does not recognize as infected files:
Ce_nsured.zip
Ce_nsured1.zip
[Would like to attach those files, but I see that the .zip extension is not allowed]
A manual inspection of the WINNT\System32 directory showed two suspicious files:
WebQuick.dll
WebQuick_.dll
That I somewhere found on the net being a BHO trojan.
Is it possible that they have dl’ed a massmailer worm that is not recognized by avast and that is running in my system?
[O.S.: Win2k]
[Mail Client: Eudora 6]
If they are detected as malware, undetected by avast. Send the sample to virus@avast.com zipped and password protected with password in email body and undetected virus/malware in the subject.
If any of these anti-spyware tools detect a trojan undetected by avast, before dealing with it send a sample to avast as above.