Win32:SuspAttach[Susp]

Viruses and worms
1

Avast deleted zip-files containing .exe-files attached to mails and reported the virus Win32:SuspAttach[Susp].
I cannot find any information about that virus on Internet. Does anybody know what it is?
Bengt

2

avast doesn’t say that it found a virus.
It says it has found a Susp(icious)Attach(ment)

3

upload and check attachment here www.virustotal.com / www.metadefender.com
if tested before, click rescan for a fresh result … post link to scan result here

4

But if it only is suspected threats, where do I find the files? They are deleted from the E-mail and I cannot find any place where they are stored.

Bengt

5

It can be that they are in the chest or deleted permanently.

6

Avast 2016: Using the Virus Chest >> https://www.avast.com/faq.php?article=AVKB21#artTitle

7

Thanks, now I succeded to rescue one of the two missing files from the virus chest, but the other one seems to be gone The virus chest doesn’t even show that it is there.

Restore is greyed out when I right-click the lines of the virus chest, but Extract worked on one of the files.

Bengt

8
[b]Restore is greyed out[/b] when I right-click the lines of the virus chest, but Extract worked on one of the files.
Probably because it cant be restored to orginal location, but can be extracted to new location that you select
now I succeded to rescue one of the two missing files from the virus chest,
have you uploaded and tested it at virustotal?
9

When I checked the file I got back from the virus chest on Virustotal, Antiy-AVL found Trojan/Win32.TGeneric. However, when I scanned for viruses in Avast Virus chest, no viruses were reported.

/Bengt

10

https://www.virustotal.com/sv/file/b4cdefbabf322c048b0a59349a64eecc9e08f5fa2a189fec5de0e804f98d1aac/analysis/1459353307/

This is how VirusTotal reports the scan:

11

First submission 2016-03-30 15:55:07 UTC ( 25 minutes ago )

Is that a file you expected to recive in mail? … could be a brand new malware

12

Yes, it was the file I expected.