For fastest, most efficient answers to questions such as these, visit the ClamXav Forum.
GeoffTivey wrote:
How do I now remove these viruses?
These files all look like ones that should be in your Spam/Junk/Trash/Deleted Items folders, so if you always empty those before scanning you'll never have to worry about them.
Never use ClamXav (or any other A-V software) to move (quarantine) or delete e-mail. It will corrupt the mailbox index which could cause loss of other e-mail and other issues with functions such as searching. It may also leave the original e-mail on your ISP's e-mail server and will be re-downloaded to your hard drive the next time you check for new mail.
When possibly infected e-mail files are found:
- Highlight the entry in the ClamXav window's top pane that needs to be dealt with.
- Right-click/<Control>-click on the entry.
- Select "Reveal In Finder" from the pop-up menu.
- When the window opens, double-click on the file to open the message in your e-mail client application.
- Read the message and if you agree that it is junk/spam/phishing then note the date and subject of the message and close the e-mail window. Now, using your e-mail client, locate that message in whatever mailbox folder it was found in and delete the message using the delete button. Reading it is especially important when the word "Heuristics" appears in the infection name.If you disagree and choose to retain the message, return to ClamXav and choose "Exclude From Future Scans" from the pop-up menu.
- If this is a g-mail account and those messages continue to show up after you have deleted them in the above manner, you may need to log in to webmail using your browser, go to the "All Mail" folder, find the message(s) and use the delete button there to permanently delete them from the server. Then check the "Trash" folder and delete them there.
The two pdf.exploit.CVE_2014_8449-1 files cannot be opened in Mail and should be able to be deleted without causing any issues. If you do see any problems later, highlight the mailbox that it came from an choose "Rebuild" from the bottom of the Mailbox men.
