OSX 10.9 Mail Virus or Malware?

Hi im running OSX 10.9 on a macbook pro and i seem to have some sort of virus in mail. It keeps emailing hundreds of people from my email address and i keep getting bounce back messages. its now gone so far that my email host has shut my address down.


How can i remove this malware????


Thank you

MacBook Pro

Posted on Jan 12, 2014 6:09 AM

Reply
12 replies

Jan 12, 2014 6:45 AM in response to Tiffia

Are those messages that are bouncing actually in your Sent Mail?

If not, log into your email provider's webmail and check there.

If they are not there, either, then it is someone else's computer which has acquired malware. You just happened to be in their contact list.


If you find the emails in the sent mail on your email provider's server via webmail, but not on your Mac, immediately change your email password. Also, if you use that password for other things on the 'net, change those, too.


AVG, Avast, etc. are all useless.

Jan 12, 2014 7:00 AM in response to Barney-15E

I cant see them in my sent items and i cant get onto the webmail to check. The emails i get say this ...... I have hunbdreds of them flooding my inbox.


This message was created automatically by mail delivery software.


A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:


lucetsy@yahoo.com
SMTP error from remote mail server after end of data:
host mta6.am0.yahoodns.net [66.196.118.35]: 554 delivery error:
dd Sorry your message to lucetsy@yahoo.com cannot be delivered. This account has been disabled or discontinued [#102]. - mta1342.mail.bf1.yahoo.com


------ This is a copy of the message, including all the headers. ------


Return-path: <chris@XXXXX.com>
Received: from [46.253.85.254] (helo=vipontqrs)
by mail75.extendcp.com with esmtpa (Exim 4.80.1)
id 1W2H8R-0004ZK-4c; Sun, 12 Jan 2014 09:15:12 +0000
From: chris@XXXXXXcom
To: <sentra500@yahoo.com>
Subject: Puny Pharm
Date: Sun, 12 Jan 2014 03:10:06 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="iso-8859-5";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5931
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6157


http://InnoGam.es/byeJ

Jan 12, 2014 5:48 PM in response to Tiffia

Tiffia wrote:


PS: Im running AVG and Avast antivirus but its not getting rid of it

1. The FIRST rule of Antivirus on Windows is: NEVER EVER EVER run 2 antivirus programs. You'll cause more problems than you could possibly remedy, because they'll "fight with each other", and may end up disabling both, leaving you more vulnerable than with one, even if it isn't very good to begin with.

2. As nearly EVERYONE has already stated, A/V on a Mac is USELESS. Get rid of it.

Jan 12, 2014 6:03 PM in response to C F McBlob

C F McBlob wrote:


2. As nearly EVERYONE has already stated, A/V on a Mac is USELESS. Get rid of it.

It is not completely useless. A program such as ClamXav is useful for scanning incoming emails from Windows users which may be infected and the files passed on to other Windows users. It can be set to scan only those files. It is non intrusive to the OSX, not like Nortons, Kerpasky, Avast, AVG etc. If I was to recommend a second one it would be Sophos.


With that said, I don't run any AV program, but I see where some users see it as useful. It is just a matter of not installing one that is so intrusive to the OSX. I agree that two should not be installed at once, and I would certainly stop short of recommending any than what I have mentioned.


Of course, if you are also running Windows on your Mac, than one should have it protected with an AV Program.


Just my 2 cents worth. Others will undoubtably disagree.


Cheers


Pete

Jan 12, 2014 6:13 PM in response to petermac87

I have five VMs (Xp through 8.1) and I have AVG on each of them, though as a VM, it's pretty much for show. If something infects a VM (on an external HD no less) I just trash it and reload. (I don't do "BootCamp")

I've owned eight Macs since 2003 and have never run A/V on any of them (except for a six month test I did for Intuit with McAfee in 2004).

From 2007-2009 I sent hundreds of viruses I collected on my iMac and MBP, from my Yahoo mail account, to AVG. They saved as text files, and I just zipped & forwarded them. Yahoo is the worst for that IMHO.

Jul 6, 2014 11:28 PM in response to Tiffia

A lot of times, it simply means that someone somehow got your email address (stole it, most likely by either hacking into one of your friends' contact list or some other way such as buying it). Spammers love to use legitimate "from" email addresses, so someone is simply sending spam using your email address. I've had that happen several times and I've already gotten spam FROM me TO me. The only way to stop this definitively would be to abandon that account and open another. Do change your password, but your email address is already "out there". And do speak to your ISP/email provider and explain that it is not you who is sending out these emails - do expand the address field to expose all headers and then send that to them - somewhere in there may be a clue as to where it came from.


Edit: meant to address Del, not the OP.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

OSX 10.9 Mail Virus or Malware?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.