Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

butterflyv

macrumors newbie
Original poster
Jan 13, 2014
4
0
Hi, not sure if this is the place to post, please point me to the correct location if it's not. I did a search here and couldn't quite find a similar thread so here I go...

I was getting this weird thing where ads were playing on my computer but there were no windows open that would do that so I did a scan with Symantec and found I had a bunch of trojans and other junk. Symantec couldn't repair them and so here I am looking for some help. I've posted my log below. Can anyone please help?!

Date Scan Source File Infection Name Status
Jan 13, 2014, 5:20:10 PM Manual Scan x26_52749.olk14MsgAttach/Catalogue.exe Trojan Horse Virus Detected
Jan 13, 2014, 5:20:10 PM Manual Scan x26_56756.olk14MsgAttach/catal_doc.exe Trojan.Zbot Virus Detected
Jan 13, 2014, 5:20:10 PM Manual Scan x26_56878.olk14MsgAttach/catal_doc.exe Trojan.Zbot Virus Detected
Jan 13, 2014, 5:20:10 PM Manual Scan x26_57551.olk14MsgAttach/Purchase Order *fdp.exe Infostealer.Limitail Virus Detected
Jan 13, 2014, 5:20:10 PM Manual Scan x26_24213.olk14MsgAttach/purchaselist.exe Trojan.Klovbot Virus Detected
Jan 13, 2014, 5:20:10 PM Manual Scan x26_41144.olk14MsgAttach/Purchase Order *fdp.exe Infostealer.Limitail Virus Detected
Jan 13, 2014, 5:20:10 PM Manual Scan x26_56701.olk14MsgAttach/catal_doc.exe Trojan.Zbot Virus Detected
Jan 13, 2014, 5:20:10 PM Manual Scan x26_56836.olk14MsgAttach/catal_doc.exe Trojan.Zbot Virus Detected
Jan 13, 2014, 5:20:09 PM Manual Scan x26_52747.olk14MsgAttach/Catalogue.exe Trojan Horse Virus Detected
Jan 13, 2014, 1:58:14 PM Manual Scan x26_24213.olk14MsgAttach/purchaselist.exe Trojan.Klovbot Virus Detected
Jan 13, 2014, 1:58:14 PM Manual Scan x26_41144.olk14MsgAttach/Purchase Order *fdp.exe Infostealer.Limitail Virus Detected
Jan 13, 2014, 1:58:14 PM Manual Scan x26_56701.olk14MsgAttach/catal_doc.exe Trojan.Zbot Virus Detected
Jan 13, 2014, 1:58:14 PM Manual Scan x26_56836.olk14MsgAttach/catal_doc.exe Trojan.Zbot Virus Detected
Jan 13, 2014, 1:57:12 PM Manual Scan x26_57551.olk14MsgAttach/Purchase Order *fdp.exe Infostealer.Limitail Virus Detected
Jan 13, 2014, 1:57:08 PM Manual Scan x26_56878.olk14MsgAttach/catal_doc.exe Trojan.Zbot Virus Detected
Jan 13, 2014, 1:57:07 PM Manual Scan x26_56756.olk14MsgAttach/catal_doc.exe Trojan.Zbot Virus Detected
Jan 13, 2014, 1:57:00 PM Manual Scan x26_52747.olk14MsgAttach/Catalogue.exe Trojan Horse Virus Detected
Jan 13, 2014, 1:57:00 PM Manual Scan x26_52749.olk14MsgAttach/Catalogue.exe Trojan Horse Virus Detected
Jan 13, 2014, 12:52:11 P Auto Scan: Auto Repa x26_57547.olk14MsgAttach/Label_12192013.exe Trojan.Dropper File Was Deleted
Jan 13, 2014, 12:52:11 P Auto Scan: Auto Repa x26_57554.olk14MsgAttach/VoiceMail.exe Trojan.Zbot File Was Deleted
Jan 13, 2014, 12:45:15 P Manual Scan x26_52747.olk14MsgAttach/Catalogue.exe Trojan Horse Virus Detected
Jan 13, 2014, 12:45:15 P Manual Scan x26_52749.olk14MsgAttach/Catalogue.exe Trojan Horse Virus Detected
Jan 13, 2014, 12:45:15 P Manual Scan x26_56756.olk14MsgAttach/catal_doc.exe Trojan.Zbot Virus Detected
Jan 13, 2014, 12:45:15 P Manual Scan x26_56878.olk14MsgAttach/catal_doc.exe Trojan.Zbot Virus Detected
Jan 13, 2014, 12:45:15 P Manual Scan x26_57539.olk14MsgAttach/VoiceMail.exe Trojan.Zbot File Was Deleted
Jan 13, 2014, 12:45:15 P Manual Scan x26_57551.olk14MsgAttach/Purchase Order *fdp.exe Infostealer.Limitail Virus Detected
Jan 13, 2014, 12:45:15 P Manual Scan x26_57656.olk14MsgAttach/Label_12192013.exe Trojan.Dropper File Was Deleted
Jan 13, 2014, 12:45:15 P Manual Scan x26_24213.olk14MsgAttach/purchaselist.exe Trojan.Klovbot Virus Detected
Jan 13, 2014, 12:45:15 P Manual Scan x26_41144.olk14MsgAttach/Purchase Order *fdp.exe Infostealer.Limitail Virus Detected
Jan 13, 2014, 12:45:15 P Manual Scan x26_56701.olk14MsgAttach/catal_doc.exe Trojan.Zbot Virus Detected
Jan 13, 2014, 12:45:15 P Manual Scan x26_56836.olk14MsgAttach/catal_doc.exe Trojan.Zbot Virus Detected
Jan 13, 2014, 12:45:15 P Manual Scan x26_57547.olk14MsgAttach/Label_12192013.exe Trojan.Dropper File Was Deleted
Jan 13, 2014, 12:45:15 P Manual Scan x26_57554.olk14MsgAttach/VoiceMail.exe Trojan.Zbot File Was Deleted
Jan 13, 2014, 12:02:01 P Manual Scan x26_57554.olk14MsgAttach/VoiceMail.exe Trojan.Zbot Virus Detected
Jan 13, 2014, 12:02:00 P Manual Scan x26_57547.olk14MsgAttach/Label_12192013.exe Trojan.Dropper Virus Detected
Jan 13, 2014, 12:01:53 P Manual Scan x26_56836.olk14MsgAttach/catal_doc.exe Trojan.Zbot Virus Detected
Jan 13, 2014, 12:01:52 P Manual Scan x26_56701.olk14MsgAttach/catal_doc.exe Trojan.Zbot Virus Detected
Jan 13, 2014, 12:00:45 P Manual Scan x26_41144.olk14MsgAttach/Purchase Order *fdp.exe Infostealer.Limitail Virus Detected
Jan 13, 2014, 11:59:28 A Manual Scan x26_24213.olk14MsgAttach/purchaselist.exe Trojan.Klovbot Virus Detected
Jan 13, 2014, 10:46:30 A Manual Scan x26_57539.olk14MsgAttach/VoiceMail.exe Trojan.Zbot Virus Detected
Jan 13, 2014, 10:46:30 A Manual Scan x26_57551.olk14MsgAttach/Purchase Order *fdp.exe Infostealer.Limitail Virus Detected
Jan 13, 2014, 10:46:30 A Manual Scan x26_57656.olk14MsgAttach/Label_12192013.exe Trojan.Dropper Virus Detected
Jan 13, 2014, 10:46:29 A Manual Scan x26_56756.olk14MsgAttach/catal_doc.exe Trojan.Zbot Virus Detected
Jan 13, 2014, 10:46:29 A Manual Scan x26_56878.olk14MsgAttach/catal_doc.exe Trojan.Zbot Virus Detected
Jan 13, 2014, 10:46:21 A Manual Scan x26_52747.olk14MsgAttach/Catalogue.exe Trojan Horse Virus Detected
Jan 13, 2014, 10:46:21 A Manual Scan x26_52749.olk14MsgAttach/Catalogue.exe Trojan Horse Virus Detected
 

Attachments

  • Virus Detections.txt
    10.1 KB · Views: 180
Last edited:
SInce all those .exe files are Windows executables, you do not need to worry, that that Windows malware can harm your Mac OS X computer.

Maybe use Symantec to remove that instead of repairing something, that does not need a repair?

To learn more about malware in Mac OS X and what steps can be taken to protect yourself, read the following F.A.Q.:
 
Deleting not working

I did try manually deleting those items and they just come back....




SInce all those .exe files are Windows executables, you do not need to worry, that that Windows malware can harm your Mac OS X computer.

Maybe use Symantec to remove that instead of repairing something, that does not need a repair?

To learn more about malware in Mac OS X and what steps can be taken to protect yourself, read the following F.A.Q.:


----------

I do have Parallels on this machine. But it's not running and I keep getting that problem where an audio ad starts to play and I close all my apps to see what's going on and it keeps playing. Weird....
 
I did try manually deleting those items and they just come back....

That malware seem to be email attachments, from what I can read from that obscure report. Maybe try ClamXav instead?

----------

I do have Parallels on this machine. But it's not running and I keep getting that problem where an audio ad starts to play and I close all my apps to see what's going on and it keeps playing. Weird....

How do you close those apps? Via CMD+Q or another method?
 
OK, running scan with ClamXav now. Will post any results.

OK, running scan with ClamXav now. Will post any results.

----------

Yes CMD+Q

That malware seem to be email attachments, from what I can read from that obscure report. Maybe try ClamXav instead?

----------



How do you close those apps? Via CMD+Q or another method?
 
These are attachments in Outlook 2011.

It is possible that when you deleted those files, Outlook re-downloaded it from your mail server since it was missing locally.


You have to delete the attachments from the emails manually in Outlook, and that'll update the emails on the server to ensure outlook doesn't re-download it in the future.
 
Sorry if I am stating the obvious, but keep in mind that when you delete emails they just get moved to the deleted mail folder (not to be confused with the Trash). You will then have to empty that folder too.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.