Hi please see attached screenshot. These files have been deleted manually and also through Avast (the program that discovered them) and they keep coming back. Don't know what to do to permanently solve this problem. They seem to always be in a new folder apple created starting with 8BD11 etc etc. Thank you!
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Virus Keep Coming Back After Deleting / Mac Mail)
- Thread starter qsch1
- Start date
- Sort by reaction score
It looks like that file is part of the trash folder for a Mail IMAP account. I suspect the IMAP server is pushing the message back to the Mail app each time you delete that file (just a guess).
Can you just go the Mail app and delete everything in the trash folder? That looks like it would include that message.
Can you just go the Mail app and delete everything in the trash folder? That looks like it would include that message.
Hi thank you Weaselboy! I have deleted the trash numerous times and even went into the source and deleted those files and still they keep coming back in that folder. I just made another scan on my computer and received another one again (this time at a different path). Kindly have a look at screenshot.
Regards, Quirin
Attachments
My guess is that you haven't emptied the IMAP trash even though you have deleted the message so:
Delete the message in Mail
Empty the Mail trash
Close Mail
Run Avast
Delete any files it finds
Empty Trash
Reboot (this is for belt and braces)
Hopefully then it will be gone.
Delete the message in Mail
Empty the Mail trash
Close Mail
Run Avast
Delete any files it finds
Empty Trash
Reboot (this is for belt and braces)
Hopefully then it will be gone.
I believe that is where OS X store some swap/cache files and that may be why you are seeing the files there. I like simonsi's process for getting rid of it.
The ironic thing here, is that this is probably Windows malware that won't affect the Mac at all.
Try temporarily disabling Avast, then following simonsi's process.
Try temporarily disabling Avast, then following simonsi's process.
You don't have the virus itself, you have infected mail attachment files. Did you follow the steps I gave you?
Hi Simonsi, Yes I followed the exact steps you gave to me. I did it two times just to make sure and actually did similar before you said.
There also seems to be one in /private/tmp/... That also came before and then I deleted it but then it reappeared.
After deleting the files and I check it again with AVAST it says there is nothing but then they magically reappear about 12 - 24 hours after.
Last edited: