7 Replies Latest reply: Mar 2, 2013 12:32 PM by traveller1000
traveller1000 Level 1 Level 1 (0 points)

My 2008 Macbook, running 10.5.8, has picked up a trojan. It is sending emails containing a single URL to my address book.  I've run Intego, avast!, clamXav & Sophos.  I have Outlook running on the Mac and avast! zapped a .pdf.exe file - /Users/me/Documents/Microsoft User Data/Office 2011 Identities/Main Identity [Backed up 2012-11-27 17.28.48]/Data Records/Message Sources/0T/0B/0M/54K/x27_54770.olk14MsgSource|>Paymentech_Statement_4FB6821474. pdf.zip#3288363839|>Chase_Paymentech_Billing_Statement_ID00000000000447394365479 23696394652345972634534578649356783264563942346523632715643534951517846516823482 35486521368452134521345796314561439561349765974365763485.pdf.exe but the emails keep going out. Help!


MacBook, Mac OS X (10.5.8)
  • 1. Re: Trojan?
    seventy one Level 6 Level 6 (8,990 points)

    The .exe indicates a Windows source.   It's not a Mac Trojan.  Read the following by the esteemed Thomas Reed. 

     

    Thomas' Corner : Mac Malware Guide   Mac OS X Snow Leopard and malware detection

  • 2. Re: Trojan?
    traveller1000 Level 1 Level 1 (0 points)

    Thanks.  I get the .exe as a MS thing, but I don't understand what's sending out random emails to everyone in my contacts list, unless either there's something in Outlook somewhere or my email pw has been hacked...

  • 3. Re: Trojan?
    seventy one Level 6 Level 6 (8,990 points)

    That is always the problem with running MS and Windows on a Mac.   That is the only way you will encounter a true virus.   But Trojans and general malware are a different thing.   If you have the EasyFind App (Free in App Store) it may help you locate any suspect files so you can delete them.    I really don't know enough to read the numerical data in you first post but rest assured, someone will ride to the rescue.

     

    Wish you well.  71.

  • 4. Re: Trojan?
    traveller1000 Level 1 Level 1 (0 points)

    Thanks again!  I'm tempted to remove Outlook and revert to Mail, but as you say hopefully someone will appear with the answer...

  • 5. Re: Trojan?
    seventy one Level 6 Level 6 (8,990 points)

    I think it all boils down to your need for Outlook, indeed any MS items.   Can you work entirely with Mac?

     

    Sorry I couldn't be of more help.

  • 6. Re: Trojan?
    MadMacs0 Level 4 Level 4 (3,735 points)

    traveller1000 wrote:

     

    I don't understand what's sending out random emails to everyone in my contacts list, unless either there's something in Outlook somewhere or my email pw has been hacked...

    I know you have already been referred to Thomas Reed's words, but take a look at this part of his guide: Someone is sending messages from my e-mail address!

  • 7. Re: Trojan?
    traveller1000 Level 1 Level 1 (0 points)

    Thanks, have changed pws yet again and will see what happens.  All the virus scans are telling me the machine is clean, so it looks like my pw was hacked or my address is just being spoofed.  Appreciate the help.