My mac book pro is switching off itself ! I scanned using clamxav it showed heuristics.phishing.... as an infection ? what should i do ?it's shutting itself every 10 -30 min

I would first suggest you update clamxav to the lates definitions. But it seems it's an email that contains the infection. Plus I don't think it's going to hurt your mac since there are no known viruses for Mac since they are all made for Windows. You should follow the directions ClamXav has for you to delete the files.

And I don't think the email infection would cause your computer to shut off since it's not made for Mac. It sounds like it could be a power supply issue OR it's overheating and auto shutting off. You need to check the internal temperature of your MBP.

Message was edited by: xdunlapx

n8 hwk wrote:

Mine is 15" mac book pro , os - snow leopard v10.6.8 . My MBP is shutting off recetly and it is increasing the shuts more by each day ,about like 10 times(at present). I google for info on MBP shutting off and i read the forums and tried using clam xav and found heuristics.phising... as an infection !

The infected file names are of .emlx format and the file names were in numbers . I am doing the scanning again for more detailed info for the next update with this discussion . Mean while i am showing you the log of clamxav

The below is the log i obtained from

Known viruses: 972378

Engine version: 0.97

Scanned directories: 10282

Scanned files: 60218

Infected files: 4

Data scanned: 15047.05 MB

Data read: 119989.84 MB (ratio 0.13:1)

Time: 2553.968 sec (42 m 33 s)

2012-09-17 15:20:01.503 ClamXavSentry[191:207] clamd not running. Now trying to launch it...

Running on 32-bit system, and RLIMIT_DATA > 2GB, lowering to 2GB!

LibClamAV Warning: **************************************************

LibClamAV Warning: *** The virus database is older than 7 days! ***

LibClamAV Warning: *** Please update it as soon as possible. ***

LibClamAV Warning: **************************************************

2012-09-17 15:20:23.488 ClamXavSentry[191:207] clamd launched successfully. Continuing...

2012-09-17 15:20:23.593 ClamXavSentry[191:207] scan email files

2012-09-17 15:20:23.594 ClamXavSentry[191:207] I will quarantine infected files

2012-09-17 15:20:24.030 ClamXavSentry[191:3483] termination status = 1

2012-09-17 15:20:24.031 ClamXavSentry[191:3483] attempting to terminate gfslogger

2012-09-17 15:20:40.572 ClamXavSentry[191:207] scan email files

2012-09-17 15:20:40.573 ClamXavSentry[191:207] I will quarantine infected files

Now , i want to know how i can stop this shutting and get my MBP running back as usual

No, it's not infected and it may not even be a real phishing file. Here's my standard guidance:

Never use ClamXav (or any other A-V software) to move (quarantine) or delete e-mail. It will corrupt the mailbox index which could cause loss of other e-mail and other issues with functions such as searching. It may also leave the original e-mail on your ISP's e-mail server and will be re-downloaded to your hard drive the next time you check for new mail.

So, if you choose to "Scan e-mail content for malware and phishing" in the General Preferences, make sure you do not elect to either Quarantine or Delete infected files.

When possibly infected e-mail files are found:

1. Right-click/Control-click on either the infection or file name in the ClamXav window.
2. Select "Reveal In Finder" from the pop-up menu.
3. When the window opens, double-click on the file to open the message in your e-mail client application.
4. Read the message and if you agree that it is junk/spam/phishing then use the e-mail client's delete button to delete it (this is especially important when the word "Heuristics" appears in the infection name).
5. If you disagree and choose to retain the message, return to ClamXav and choose "Exclude From Future Scans" from the pop-up menu.
6. If this is a g-mail account and those messages continue to show up after you have deleted them in the above manner, you may need to log in to webmail using your browser, go to the "All Mail" folder, find the message(s) and use the delete button there to permanently delete them from the server.

To fix the corrupted mailbox index(es), highlight each one that was corrupted and choose Rebuild from the appropriate menu.

Heuristics means that there was something suspicious about the way the message was formated, not that it matched any specific signature for a phishing e-mail. It could easily be something you need to keep, so under no circumstances should you delete the message without reading it.