FakeBill.UPS not found during normal search

[Wilkins]

I recently got one of those "UPS Delivery Problem" e-mails with a .zip attachment. Knowing it wasn't a real problem, I right mouse clicked on it and scanned it with Norton AV and Spybot S&D. Norton didn't say anything, Spybot said it was FakeBill.UPS (Heuristic) which the website says links to a site with bad software.

My question is, why doesn't Spybot find it when I do a full search of my whole computer?

Thanks

Wilkins

[spybotsandra]

Hello,

The heuristic scan and the usual Spybot scan have different scan routines.
Heuristics describes other methods of file detection other than the classic methods that include attributes such as filename, filesize, hashes, digital signatures, versioning information. Our heuristics go deeper into a file and try to determine its function by reading the actual file contents or parts of it and checks it for certain patterns.
Further Spybot does not scan the mailsystem as this is a complete different sector for anti virus solutions.

Best regards
Sandra
Team Spybot