Can't Quarantine Or Disenfect

Hi, I'm running on my iMac Yosemite for the first time. It has caught 3 so far within the email client: Trojan.******.171700. It was able to move one to quarantine, but was unable to disinfect one and unable to move to quarantine.

Would simply deleting the emails in my spam take care of it? I did that. How do I get rid of the ones the s-ware can't?

Here is a screenshot.

Thanks.

/applications/core/interface/file/attachment.php?id=13467" data-fileid="13467" rel="">scan.tiff

Find more posts tagged with

Comments

csalgau

There are issues with deleting an email file outside of Apple Mail, as doing so may cause an index corruption and other issues with the software.

Assuming this email is inside your spam folder, clearing that should solve the problem. Compacting might be necessary afterwards.

You may try opening the actual email file (.emlx) indicated by the scan log with TextEdit or similar simple application(but not Pages or other full word processors). While the format is not designed for user reading, you should be able to pick up some keywords to search for inside Apple Mail.

mibtp

Hi, so why would I want to open any of these files? How do I get rid of them? More of the same virus was found on my backup drive as well.

Thanks.

There are issues with deleting an email file outside of Apple Mail, as doing so may cause an index corruption and other issues with the software.

Assuming this email is inside your spam folder, clearing that should solve the problem. Compacting might be necessary afterwards.

You may try opening the actual email file (.emlx) indicated by the scan log with TextEdit or similar simple application(but not Pages or other full word processors). While the format is not designed for user reading, you should be able to pick up some keywords to search for inside Apple Mail.

csalgau

Given that it appears it's not safe to just delete the file, if emptying your spam folder doesn't help, you need a way to find the email inside Apple Mail.

The suggestion to use TextEdit was in order to prevent any unwanted action your email client would take when normally showing you the file, as this specific detection concerns a fragment of HTML that may appear in emails.

Towards the end of that file you should be able to see the sender and subject of the email and use that to find and remove the email.

Removing it from your backups is a different issue. Unless you overwrite your backups, you might want to manually remove the file from there or discard/ignore those backups.

On the other hand, it appears the external dangerous resource detected inside that email is no longer active, so you're in no real danger and it only presents some privacy issues at the moment.