Hey folks. I am very computer literate and keep a squeaky clean system, but this is stumping me. I have four email accounts. All are acting normally except for my ISP bellsouth.net email. When I click on any email, Antivir detects 'mobmain[1].htm', and I quarantine it. Then, when I look at the unsuspicious, legit mail and hit delete, Antivir detects 'AppLogic+mobmain[1].htm', which I also quarantine. It does this for each piece of mail.

Antivir reports them being in "C:\D&S\Owner\Local Settings\Temp Internet Files\Content.IE5\"

I did not post a HijackThis log, because I can read them and mine is clean. Plus user "slickjr169" has one posted there already for the same problem since 1\27\07, but noone has replied to it. My problem has been going on since then also.

I usually can "google" my way to solutions, but a search on the "applogic+mobmain[1].htm" thing only returns hits about 'usage stastics', web counters, 'site access trackers' and such (which kinda worries me!)

I did see this in a result:
http://webmail.bellsouth.net/cgi-bin/gx.cgi/Applogic+mobmain

I pasted this into my address bar and it returns me to my personal bellsouth.net email login page. I guess because I didn't dare fill in the login details!! It looked like my normal page.

I have made sure the \Content.IE5\ folder has been cleaned with Tracks Eraser Pro and CCleaner. But immediately after, I open the email, and Antivir still detects the HTML/Feebs.Gen varient.

I have scanned in Safe Mode with the following updated programs looking for worms, viruses, rootkits or trojans: Ewido, Bitdefender 9, Spyware Doctor, Spy Sweeper, Nod32, Windows Defender, F-Secure Blacklight, Spydefense, BitD-Rootkit Uncover, a-squared, Clamwin, Spybot S+D, Cure-it, Rootkit Revealer, Stinger, Bazooka and TrendMicro Antispyware.

I have a Look 'n' Stop firewall and always run Antivir, Ewido, SpywareGuard, Spyware Doctor and Windows Defender in real-time. The other are on demand scans.

I have never had anything like this problem and can find absolutely no information about it on the net to help me.

I am posting this in the Antivir forum, because after three days of troubleshooting this, I am beginning to think it might have to do with an Antivir update, as it is is the only program detecting anything. I am almost certain my system is clean. And I never open any email attatchments.

CilyPudi would appreciate any suggestions about what may be going on with me and the user slickjr169. I think he also uses bellsouth.net email. Thanks in advance.

Hi! Have you contacted the Anti-Vir forum or their technical support people? They can be quite helpful! Good luck! I feel your pain.

Thanks RoseyJo. I just signed up to the Avira forum site, and indeed it appears this HTML/Feebs.Gen and the 'Applogic+mobmain[1].htm' is a false positive by Antivir related exclusively to a bellsouth.net email account! Whew....and CilyPudi is most grateful.

I just got back from the Avira Forum and the false positive has been corrected with a simple update of Antivir. All is well and back to normal with my bellsouth.net email.

http://forum.antivir-pe.de/index.php