Virus 8399.emlx

I have a virus that continues to appear but gets detected by ClamXav. The identified virus is 8399.emlx and it is found in my

/Users/(Mydirectory)/Library/Mail/IMAP-(My email)@imap.gmail.com/[Gmail]/All Mail.imapmbox/Messages/8399.emlx:


After it is found it reappears and the only function I am performing is Web browsng with no downloads. Anyone have any experience or knowledge of the virus?

MacBook Pro, Mac OS X (10.6.8)

Posted on Jan 9, 2012 8:35 PM

Reply
Question marked as Top-ranking reply

Posted on Jan 9, 2012 10:58 PM

macfrombrampton wrote:


I have a virus that continues to appear but gets detected by ClamXav. The identified virus is 8399.emlx and it is found in my

/Users/(Mydirectory)/Library/Mail/IMAP-(My email)@imap.gmail.com/[Gmail]/All Mail.imapmbox/Messages/8399.emlx:

Actually, that's the name of the e-mail message file that may be infected. It's not a virus nor is it the infection name.

After it is found it reappears and the only function I am performing is Web browsng with no downloads. Anyone have any experience or knowledge of the virus?

You don't say how you are trying to get rid of it, but there is only one way to safely process an infected e-mail and that is from within the e-mail client (Apple Mail in your case). Otherwise you will most certainly corrupt the mailbox index (which can usually be fixed by rebuilding the mailbox), could cause you to lose additional e-mails and as you found, sometimes does not delete the file from the server, so it comes to your computer again the next time you check for new mail.


You can either navigate to the location shown above or the next time ClamXav finds it, Right-click / Control-click on the file or infection name and select "Reveal In Finder" from the contextual pop-up menu. Once the file appears in the "Messages" window, double-click on 8399.emlx and read the message. If you agree that it is an infected message that you don't need, make note of the date and subject of the e-mail (you will need this in the step below) then use the Mail delete button to trash it, then if you have elected to move deleted message to the trash, be sure to empty the trash mailbox. If it appears to be a false alarm and is an e-mail you want to retain, write down the number so that you can ignore it during future scans.


With gmail accounts, there is sometimes an additional step to permanently delete the message. Log into your gmail account in webmail using your favorite browser. Go to the "All Mail" mailbox, search for that message using the subject and date copied above. Use the webmail delete button and again make sure to empty the trash if there's anything there.


And in the future I would encourage you to visit the ClamXav Forum where you will find the answer to most situations and usually a faster response if you don't find it.

58 replies

Apr 9, 2012 12:50 AM in response to macfrombrampton

Why do apple continue to say they don't get pc viruses? Of course they don't they operating system is different, but this false advertising because people think you can't get viruses on a mac or iPad, but that is not true is it?



Personally I like to see that smug look of mac users being wiped off there face when they get a virus, even 275 macs at the apple in california were infected with flashback trogen. No system is invulnerable, ha ha

Apr 9, 2012 4:55 AM in response to Mrwideboy

First, Apple has not said anoint about viruses in any ads for quite some time.


Second, Macs DON'T get PC viruses, because they're PC viruses. That means they only work on Windows. Macs can get Mac-specific malware, and nobody with any sense has claimed otherwise for some time now.


Third, it is usually the novice users who couldn't give a flip about the whole Mac vs PC thing who get infected. Are you really so self-obsessed as to wish ill on such people, and laugh at their misfortune, because you have something against Mac zealots? That is truly foolish.

Apr 25, 2012 12:09 PM in response to thomas_r.

No that is incorrect Thomas A Reed.


The Malware "Heuristic.Phishing.email.SpoofedDomain"" is coming in on specific emails in the last case Monster.ca and the behavior of "Apples Mail" changes either it shows incorrect dates for mails received of mail files are missing. Clamxav identifies the offender and removes it but when another such mail is sent suggesting that this is being done purposely.


HAs anyone have any definitions for the "Heuristic.Phishing.email.SpoofedDomain"" identified by Clamxav

Apr 25, 2012 12:28 PM in response to thomas_r.

So your now an authority on Clamxav ?Thomas A Reed


Apple placed there trust in the Clamxav software by placing it in the app Store and it is doing what other Virus software do and tht is remove threats from the operating system. You are mking a statement that it cannot hurt me without telling me what the malware does?


I would be more interested in anyone who has experience with "Heuristic.Phishing.email.SpoofedDomain" or can provide details on its function.

Apr 25, 2012 11:41 PM in response to MadMacs0

I don't know why you think I need to remove files when Clamxav identified the malware and removed it automatically? Also I noticed no operational problems with Apple's Mail once it is removed.


The key to this Apple Mail malware is to identify the function of "Heuristic.Phishing.email.SpoofedDomain" to know what it effects before making any suggestions.

Apr 26, 2012 4:12 PM in response to JoeyR

I am simply looking for the following infomration from the forum, not suggestions to delete files or believes that Clamxav is not working correctly without giving any evidence.


The following Malware "Heuristic.Phishing.email.SpoofedDomain" was found on my Snow Leopard machine in the Apple Mail folder.

Does anyone have any idea what the fuction of this Malware that Clamxav detected ( detected this malware several times and within the last few days April-24-2012). clamxav does not seem to have a descruiption for what "Heuristic.Phishing.email.SpoofedDomain" does.

Apr 26, 2012 5:09 PM in response to stevejobsfan0123

What help are you refering? I have asked the following




The following Malware "Heuristic.Phishing.email.SpoofedDomain" was found on my Snow Leopard machine in the Apple Mail folder.

Does anyone have any idea what the fuction of this Malware that Clamxav detected ( detected this malware several times and within the last few days April-24-2012). clamxav does not seem to have a descruiption for what "Heuristic.Phishing.email.SpoofedDomain" does.


I have not received a definition for what this malware function is and have not been able to locate any information.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Virus 8399.emlx

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.