On 25/03/06, Reg Whitely <[EMAIL PROTECTED]> wrote:
> That is weird because two of the mailboxes - Deleted Messages
> and Junk have nothing in them. Could the boxes
> themselves be carrying the virus?

Not yet.

> Here are the mailbox details from ClamXav log:
> /Users/rwhitely/Library/Mail/[EMAIL PROTECTED]/Deleted
> Messages.mbox/mbox: Worm.Mydoom.M FOUND
...etc...

I suspect the above .mbox files must be somehow left over from Panther
(no longer used in Tiger)? If so, I'd guess you can just delete them
manually in the Finder.

> The other four were in .zip files in User/Library/Caches/Java Applets/
> cache/javapi/v1.0/jar
> I have absolutely no idea what they are except to say that there are

I guess you have visited websites which have these Java viruses
embedded in them. Although the method of exploitation is
Windows-specific in this instace, Java is of course also installed on
your Mac (including Intel Macs). Make sure you are up-to-date with
your Apple Updates and, if you like, you can disable Java (not
JavaScript) in your browser preferences (to prevent these items from
being downloaded). Of course, some people may require Java for
intranet or banking applications.

James.