Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Phishing email, I stupidly clicked on the link and now after I scan with ClamXav it keeps reappearing even though I remove it

Phishing email, I stupidly clicked on link, entered only personal details before realising. I deleted email and keep scanning with ClamXav but the infection keeps reappearing in the scan even though I keep deleting to trash.

Posted on Jun 13, 2015 4:39 AM

Reply
34 replies

Jun 15, 2015 9:51 AM in response to hels2310

hels2310


If MadMacs0 is right about the eMail repeatedly reappearing, see his message posted on Jun 13, 2015 6:40 PM CDT-US in this thread.

The step-by-step is pretty easy to follow - disregard all the other stuff.

If it is NOT the email message but something else happening on your Mac, give us some more detail.


Go through what you are doing with ClamXav again - tell us about it - step-by-step - then take a screenshot of the results you get

  1. Press > Command + SHIFT + 3 - the screenshot will be a new file on your Desktop.
  2. Then use the camera tool in the toolbar reply editor = User uploaded file =
  3. next click the [Browse] button >
  4. navigate in the dialog to the Desktop folder >
  5. choose your new screenshot file >
  6. click the [Open] button
  7. the screenshot will be inserted where the cursor is in your reply

Jun 15, 2015 1:45 PM in response to ChitlinsCC

ChitlinsCC wrote:


Although this makes perfect sense, it makes me wonder why a modern AV software App developer would not know all this and instead of shuffling the message around simply display an alert stating the likely problem?

I can't speak for exactly how other A-V scanners handle this, but when ClamXav finds a potentially infected e-mail and chooses to move it they get this warning:

User uploaded file

With default being a "No" response, but will allow it if the user insists. Hopefully that is sufficient to convince the user that they need to find out why this isn't a good idea, but some go right ahead and move it to quarantine or trash.


If the user decides to instead use the Finder to move it, then Finder doesn't alert them and allows it to happen. Unfortunately there isn't any way that ClamXav can warn users about their Finder actions.

Jun 15, 2015 5:30 PM in response to jackm831

For the record - with no judgements - your image comes from > http://www.av-test.org/en/news/news-single-view/mac-os-x-under-attack-10-securit y-packages-put-to-the-test/


AVTEST

From Wikipedia, the free encyclopedia


AV-TEST is an independent organization which evaluates and rates antivirus and security suite software[1] for Microsoft Windows and Android operating systems,[2] according to a variety of criteria. Every other month, the researchers publish the results of their testing,[3][4] where they list which products they awarded their certification.[5] The organisation is based in Magdeburg, in Germany.[3][5] In 2013 the security specialist and CEO of IT security company Kaspersky Lab, Eugene Kaspersky, criticized AV-TEST for changing their certification process.

Jun 15, 2015 6:24 PM in response to jackm831

Interesting - do a search here in the forums for most of them and most of the problems mentioned were actually caused by them. Note also they are Windoze-centric - have they actually ever tested any of them with a Mac?


Until/if ever there is an actual virus that will infect Mac OS, I prefer a well functioning OS vs. running such ****ware (and following responsible online browsing/no torrents or other questionable sites/etc).

Phishing email, I stupidly clicked on the link and now after I scan with ClamXav it keeps reappearing even though I remove it

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.