Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Mail worm Problem

My first and only problem with a virus/worm in 10 years of using Mac's. I opened email with a worm. It has been sending emails to very one in my address book continuously at least twice daily. The emails are about "money making opportunities". I downloaded and ran ClamXav several times and it has detected a "heuristic worm" in and email from American Express Networks both on my Macbook Pro and my iMac. Use FIOS fro Verizon for my Internet and email service.. I deteled the worm, deleted the email, and re-ran ClamXav. The worm was apparently cleared, but somehow my mail program was still trying to re-send the emails to addresses which were old no longer valid. Now after several days of not finding the worm with the ClamXav on my two computers, now my iphone which has my Verizon account is sending out the emails.

Where do I go from here. Any help would really be appreciated.

Thanks

Mac Book Pro, Mac OS X (10.7.1)

Posted on Apr 9, 2012 10:52 AM

Reply
Question marked as Best reply

Posted on Apr 9, 2012 11:25 AM

Your email account has been hacked. Change the password.

21 replies

Apr 11, 2012 5:46 AM in response to Richard Declue

Definitly coming from my account. I

s it possible that the virus is also on my iphone which also also has my FIOS account?

I have 2 iphones, a Macbook Pro and and Imac all with my FIOS email acount on them, I will try erase the password on 3 of them. leaving only one with an active email to see which one is sending the emails?

Any other suggestions?

Apr 11, 2012 6:04 AM in response to Richard Declue

Not possible. Further, whatever ClamXav removed was probably just Windows malware attached to an e-mail or something. (What was the name of the malware that it found?) Malware is not likely to be involved.


How are you sure that it is coming from your account? Are you seeing the messages in your Sent mailbox? If so, someone has hacked your account again. I'm unfamiliar with FIOS, but some accounts make repeat hacks easier than they should be. For example, a hacker who gets into your GMail account can change a setting that most peopel are unaware of to allow themselves access any time, even if you change your password.


If you're not seeing the offending messages in your Sent mailbox, they're probably being spoofed, and not actually coming from you.

Apr 11, 2012 3:35 PM in response to Linc Davis

"All emails have been altered and none are real"


From: postmaster@verizon.net

Subject: Delivery Notification: Delivery has been delayed

Date: April 11, 2012 1:36:00 AM EDT

To: MyFake@verizon.net


This report relates to a message you sent with the following header fields:


Message-id: <0M28002006NL8WZ1@vms173005.mailsrvcs.net>

Date: Mon, 09 Apr 2012 13:42:15 -0500

From: "MyFake@verizon.net" <MyFake@verizon.net>

To: Fake1@aol.com, Fake2@aol.com, Fake3@email.msn.com,

Fake4@eloan.com

Subject: Re:


Your message has been enqueued and undeliverable for 1 day

to the following recipients:


Recipient address: Fake4@eloan.com

Reason: unable to deliver this message after 1 day



Delivery attempt history for your mail:


Tue, 10 Apr 2012 22:50:30 -0500 (CDT)



Tue, 10 Apr 2012 14:49:43 -0500 (CDT)



Tue, 10 Apr 2012 06:48:51 -0500 (CDT)



Tue, 10 Apr 2012 02:48:04 -0500 (CDT)



Mon, 09 Apr 2012 22:47:17 -0500 (CDT)



Mon, 09 Apr 2012 18:46:30 -0500 (CDT)



Mon, 09 Apr 2012 16:45:43 -0500 (CDT)



Mon, 09 Apr 2012 14:44:47 -0500 (CDT)



Mon, 09 Apr 2012 13:43:49 -0500 (CDT)



The mail system will continue to try to deliver your message

for an additional 3 days.

Apr 11, 2012 3:43 PM in response to Richard Declue

Those still aren't the full headers. You have to choose View -> Message -> All Headers. Also, you haven't addressed the question of whether you're seeing these messages in your Sent mailbox. If all you're seeing is bounced "undeliverable mail" messages, and nothing suspicious in the Sent mailbox, then someone is spoofing your address and the bounces are coming to you. There's virtually nothing you can do about that, unfortunately.

Mail worm Problem

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.