Today I ran a
clamscan -ri / and got some positives for some malware. Most are in the "spam" folder, so that's no problem. But one is among my saved e-mails:
/home/user/.icedove/bfa059u1.default/ImapMail/imap.server.com/INBOX.sbd/saved: Doc.Dropper.Agent-1552723 FOUND
"Icedove" is Debian's rebranded Thunderbird. "saved" is the folder under the inbox that contains the message with the malware.
Is there any way to get more info from Clamscan to find out the name of the attachment that contains the malware?
How can I find out which particular e-mail that contains this program?