Virus Detected

Requested action not taken: virus detected

Original message follows.

Received: from Lisa [72.93.161.107] by advanced-media-productions.com with ESMTP
(SMTPD-9.22) id AA5D0834; Thu, 14 Aug 2008 15:41:17 -0400
From:
To:
References: 016701c8fe36$a5d1fa70$f175ef50$@com a3b4149d0808141236w7deba30bv422630307dc656e2@mail.gmail.com
In-Reply-To: a3b4149d0808141236w7deba30bv422630307dc656e2@mail.gmail.com
Subject: RE:
Date: Thu, 14 Aug 2008 15:41:17 -0400
Message-ID: 007b01c8fe45$bc1dfea0$3459fbe0$@com
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=“----=_NextPart_000_007C_01C8FE24.350C5EA0”
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Acj+RPmqXXc7NBkoRgqWW8xoo8i7uQAALokw
Content-Language: en-us

This is a multipart message in MIME format.

------=_NextPart_000_007C_01C8FE24.350C5EA0
Content-Type: text/plain;
charset=“us-ascii”
Content-Transfer-Encoding: 7bit

This was from the e-mail scanner?

update avast and then rt click the ball and schedule a boot time scan including e-mail and archives, etc
reboot
move any hits to the CHEST and post back

was there any attachment?
did you open the e-mail?

There wasn’t any attachment that was opened. Plus there is nothing in the chest. This seems to happened maybe once per month. I guess I don’t know what Avast is finding. Have any idea why is flagged this email?

To be sure you’re clean, I suggest:

  1. Disable System Restore and then reenable it again.
  2. Clean your temporary files.
  3. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
  4. Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
  5. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
  6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
  7. Immunize your system with SpywareBlaster or Windows Advanced Care.
  8. Check if you have insecure applications with Secunia Software Inspector.

we’ll have to get someone with e-mail experience
I can’t tell if this is avast or your e-mail provider

you show
Requested action not taken: virus detected
help below says the word “infected” should appear

help shows this:

Sending and receiving mail

You can start using the Mail scanner immediately after the successful activation. Try sending an e-mail to yourself. After receiving it, take a look at the headers. It should read:

X-Antivirus: avast! (VPS 4.7.2003), Outbound message
X-Antivirus-Status: Clean
X-Antivirus: avast! (VPS 4.7.2003), Inbound message
X-Antivirus-Status: Clean

The first two lines refer to message sending. In the first line, there is information about the version of the virus database and whether it is outgoing or incoming message. The second line contains results of file scanning. If it is not infected, the word Clean should appear; if it is infected, the word Infected would appear instead. If it was not scanned, then the words “Not tested” would appear. If these lines are not in the headers at all, it probably means that the message did not pass through the Mail scanner, and thus the system is not configured properly.

If the Mail scanner finds an infected message, it acts according to the settings of the Internet Mail provider on “Virus” page. It is suggested to select Choose action (interactive), so that you will be instantly informed about the incoming virus. Information about the infection is written to the header and also to the body of the message. Some e-mail programs are not able to show correctly the part of the message containing the information about virus. So, it is suggested to view all of the text attachments first, because one of them may originate from the Mail scanner.

The Mail scanner tests the body of messages and attachments encoded by BASE64, UU-encode and BinHex. The Mail scanner can repair or remove these attachments. If the virus is found in the body of a message, it allows you to remove the body and replace it by information text. The headers will remain, so you will know who sent the message and you can request the message again, or you can inform the sender that he/she is spreading a virus.

If your mail program tells you that it cannot contact the mail server, check whether the ashMaiSv.exe program is running. If not, run it and try again. Installation program sets an automatic startup of ashMaiSv.exe at the time of the computer start. If it is still not starting, add its shortcut to “Startup” folder in Start menu.

Excellent suggestions

Better safe than sorry :wink: