Thanks Ray - Hope you've managed to leave that office by now! Phil
On 31 Jan 2013, at 19:09, Ray Packham <[email protected]> wrote: > Hi sorry for delay still in office working bloody horrendous job ... Anyhow > it's a mac trojan and your email has been caught up on some list and is being > used by spammers . There are a lot of these Trojans about as example emails > for fake FedEx are one and the same. I would to be honest ignore them and > delete any you don't recognise .now your email is out there there is not much > you can do, your not being targeted as such just getting lots of email > because your on a list somewhere. I looked at the Trojan and there are loads > of variations on a theme for this one. It's an email Trojan I would delete > them as your doing and clean your machine letting clam delete the infected > files > > Not much help I know but all can think of at mo whilst sitting at my desk > trying to look at a windows registry and pull out the registered owner after > she has deleted a lot of stuff arghhh ready for early tomorrow morning. > > Regards ray > > > Sent from my iPhone > > On 31 Jan 2013, at 15:01, Phil Tomlinson <[email protected]> > wrote: > >> Hi Ray >> I've relocated the Trojan. Its called "Email.TrojanGZC". I've also seen >> references to this same GZC thing on an anti virus forum, where someone was >> describing the exact same origin - a postal delivery message. It may be also >> relevant to tell you that I've been getting a lot of spam mail originating >> from references to a village website that I help with. They are requests to >> become members of this Drupal-based website. I just delete the majority of >> them, but some seem genuine and I admit them onto the site. They just keep >> coming though - have I been targeted? Is there a connection with this >> Trojan? What should I do? >> >> Phil >> >> On Wednesday, 30 January 2013 23:23:32 UTC, Phil Tomlinson wrote: >> Thanks Ray. >> >> >> On 30 Jan 2013, at 20:34, Ray Packham <[email protected]> wrote: >> >>> HI >>> >>> If it were a Mac trojan I would be surprised but using torrents you can >>> catch anything, I have scan on demand and its picked up a few windows >>> trojans and viruses. I would rescan see if you can determine what the >>> trojan is and then go searching for it. For example Backdoor.OSX.SabPub.a. >>> is a OS X Trojan, AGENT.AWF is a Windows Trojan…. >>> >>> If the email is nothing to do with you i'd let your Clam AVS clean it. I >>> would also be careful about downloading from Torrents. >>> >>> Ray >>> >>> >>> >>> On 30 Jan 2013, at 20:10, Philip Tomlinson >>> <[email protected]> wrote: >>> >>>> Thanks for the reply Ray >>>> I turned Clam Xav off. When I opened it again to see if I could find any >>>> information about the Trojan, the screen was blank. Short of scanning the >>>> whole thing again I can't tell you what type of T it was. Would the suffix >>>> or part of the name reveal the target? If it were a Mac Trojan what would >>>> I do with it? >>>> >>>> Phil >>>> >>>> On 30 Jan 2013, at 19:19, Ray Packham <[email protected]> wrote: >>>> >>>>> HI >>>>> Does Clam Xav state what sort of trojan it is because most likely its a >>>>> windows trojan. in which case it would not infect your mac but would >>>>> infect a pc that you send it onto if they do not have anti virus software. >>>>> >>>>> regards >>>>> Ray >>>>> >>>>> >>>>> >>>>> On 30 Jan 2013, at 15:58, Phil Tomlinson >>>>> <[email protected]> wrote: >>>>> >>>>>> Advice please guys! >>>>>> My son has installed Vuze on my Mac. I thought I ought to check if there >>>>>> was any danger of viruses emanating from it, so I then installed >>>>>> ClamXav. Clam Xav is now indicating that I have a Trojan in an email. >>>>>> In the guide to Calm Xav it says:- "If the file in question is an email >>>>>> or part of a mailbox, you probably don't want to delete or quarantine >>>>>> it." So what should I do? (Interestingly, the Trojan is nothing to do >>>>>> with Vuze but in an email from an Australian delivery service) >>>>>> >>>>>> Phil >>>>>> >>>>>> -- >>>>>> You received this message because you are subscribed to the Google >>>>>> Groups "Sussex Mac User Group" group. >>>>>> To unsubscribe from this group and stop receiving emails from it, send >>>>>> an email to [email protected]. >>>>>> To post to this group, send an email to [email protected]. >>>>>> Visit this group at http://groups.google.com/group/smug?hl=en-GB. >>>>>> For more options, visit https://groups.google.com/groups/opt_out. >>>>>> >>>>>> >>>>> >>>>> >>>>> -- >>>>> You received this message because you are subscribed to the Google Groups >>>>> "Sussex Mac User Group" group. >>>>> To unsubscribe from this group and stop receiving emails from it, send an >>>>> email to [email protected]. >>>>> To post to this group, send an email to [email protected]. >>>>> Visit this group at http://groups.google.com/group/smug?hl=en-GB. >>>>> For more options, visit https://groups.google.com/groups/opt_out. >>>>> >>>>> >>>> >>>> >>>> -- >>>> You received this message because you are subscribed to the Google Groups >>>> "Sussex Mac User Group" group. >>>> To unsubscribe from this group and stop receiving emails from it, send an >>>> email to [email protected]. >>>> To post to this group, send an email to [email protected]. >>>> Visit this group at http://groups.google.com/group/smug?hl=en-GB. >>>> For more options, visit https://groups.google.com/groups/opt_out. >>>> >>>> >>> >>> >>> -- >>> You received this message because you are subscribed to the Google Groups >>> "Sussex Mac User Group" group. >>> To unsubscribe from this group and stop receiving emails from it, send an >>> email to [email protected]. >>> To post to this group, send an email to [email protected]. >>> Visit this group at http://groups.google.com/group/smug?hl=en-GB. >>> For more options, visit https://groups.google.com/groups/opt_out. >>> >>> >> >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Sussex Mac User Group" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To post to this group, send an email to [email protected]. >> Visit this group at http://groups.google.com/group/smug?hl=en-GB. >> For more options, visit https://groups.google.com/groups/opt_out. >> >> > > > -- > You received this message because you are subscribed to the Google Groups > "Sussex Mac User Group" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send an email to [email protected]. > Visit this group at http://groups.google.com/group/smug?hl=en-GB. > For more options, visit https://groups.google.com/groups/opt_out. > > -- You received this message because you are subscribed to the Google Groups "Sussex Mac User Group" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send an email to [email protected]. Visit this group at http://groups.google.com/group/smug?hl=en-GB. For more options, visit https://groups.google.com/groups/opt_out.
