Virus Keep Coming Back After Deleting / Mac Mail)

Discussion in 'MacBook Pro' started by qsch1, Jan 19, 2015.

  1. qsch1 macrumors newbie

    Joined:
    Apr 30, 2013
    #1
    Hi please see attached screenshot. These files have been deleted manually and also through Avast (the program that discovered them) and they keep coming back. Don't know what to do to permanently solve this problem. They seem to always be in a new folder apple created starting with 8BD11 etc etc. Thank you!
     

    Attached Files:

  2. Weaselboy Moderator

    Weaselboy

    Staff Member

    Joined:
    Jan 23, 2005
    Location:
    California
    #2
    It looks like that file is part of the trash folder for a Mail IMAP account. I suspect the IMAP server is pushing the message back to the Mail app each time you delete that file (just a guess).

    Can you just go the Mail app and delete everything in the trash folder? That looks like it would include that message.
     
  3. qsch1 thread starter macrumors newbie

    Joined:
    Apr 30, 2013
    #3
    Hi thank you Weaselboy! I have deleted the trash numerous times and even went into the source and deleted those files and still they keep coming back in that folder. I just made another scan on my computer and received another one again (this time at a different path). Kindly have a look at screenshot.

    Regards, Quirin
     

    Attached Files:

  4. qsch1 thread starter macrumors newbie

    Joined:
    Apr 30, 2013
    #4
    It seems that it is putting the virus in the private/tmp/ file...
     
  5. simonsi macrumors 601

    simonsi

    Joined:
    Jan 3, 2014
    Location:
    Auckland
    #5
    My guess is that you haven't emptied the IMAP trash even though you have deleted the message so:

    Delete the message in Mail
    Empty the Mail trash
    Close Mail
    Run Avast
    Delete any files it finds
    Empty Trash
    Reboot (this is for belt and braces)

    Hopefully then it will be gone.
     
  6. Weaselboy Moderator

    Weaselboy

    Staff Member

    Joined:
    Jan 23, 2005
    Location:
    California
    #6
    I believe that is where OS X store some swap/cache files and that may be why you are seeing the files there. I like simonsi's process for getting rid of it.
     
  7. qsch1 thread starter macrumors newbie

    Joined:
    Apr 30, 2013
    #7
    Hey any help at all, anyone know of this virus and how to get it cleaned...
     
  8. Bruno09 macrumors 68020

    Joined:
    Aug 24, 2013
    Location:
    Far from here
    #8
    Did you delete that mail from Mail ?

    This is the only way to get rid of it.
     
  9. cjmillsnun macrumors 68020

    Joined:
    Aug 28, 2009
    #9
    The ironic thing here, is that this is probably Windows malware that won't affect the Mac at all.

    Try temporarily disabling Avast, then following simonsi's process.
     
  10. simonsi macrumors 601

    simonsi

    Joined:
    Jan 3, 2014
    Location:
    Auckland
    #10
    You don't have the virus itself, you have infected mail attachment files. Did you follow the steps I gave you?
     
  11. qsch1, Jan 26, 2015
    Last edited: Jan 26, 2015

    qsch1 thread starter macrumors newbie

    Joined:
    Apr 30, 2013
    #11
    Hi Simonsi, Yes I followed the exact steps you gave to me. I did it two times just to make sure and actually did similar before you said.

    There also seems to be one in /private/tmp/... That also came before and then I deleted it but then it reappeared.

    After deleting the files and I check it again with AVAST it says there is nothing but then they magically reappear about 12 - 24 hours after.
     

Share This Page