Virus in Database - Now what?

Hi

My virus program found the following file in the Entourage database:
HTML.Phishing.Bank

The Virus detection program isolates the entire database.

I can't see any way of getting rid of that file without ditching the whole
database and starting over again which is a lot of work to reset all the
preferences, rules etc.. Is there anything less drastic I can do? Is this
file dangerous or can I just ignore it?

Thanks
--
Rudy Kohut
Melbourne Australia
(newsgroup post)

matt
Tue Jun 21 10:52:32 CDT 2005

Rudy Kohut <kohutr@connexus.net.au> wrote:

> Hi
>
> My virus program found the following file in the Entourage database:
> HTML.Phishing.Bank
>
> The Virus detection program isolates the entire database.
>
> I can't see any way of getting rid of that file without ditching the whole
> database and starting over again which is a lot of work to reset all the
> preferences, rules etc.. Is there anything less drastic I can do? Is this
> file dangerous or can I just ignore it?

Yep, ignore it. m.


--
matt neuburg, phd = matt@tidbits.com, http://www.tidbits.com/matt/
Tiger - http://www.takecontrolbooks.com/tiger-customizing.html
AppleScript - http://www.amazon.com/exec/obidos/ASIN/0596005571
Read TidBITS! It's free and smart. http://www.tidbits.com

JE
Tue Jun 21 11:08:41 CDT 2005

In article <1gyi0mm.naekgrh7dctbN%matt@tidbits.com>,
matt@tidbits.com (matt neuburg) wrote:

> > I can't see any way of getting rid of that file without ditching the whole
> > database and starting over again which is a lot of work to reset all the
> > preferences, rules etc.. Is there anything less drastic I can do? Is this
> > file dangerous or can I just ignore it?
>
> Yep, ignore it. m.

One caveat. While it's safe to ignore it on your Mac, be sure you don't
forward/redirect the infected file to a WinTel user (though they should
have their own AV software).

Tom
Tue Jun 21 12:32:03 CDT 2005

In article <jemcgimpsey-46A15A.10084121062005@msnews.microsoft.com>,
JE McGimpsey <jemcgimpsey@mvps.org> wrote:

> In article <1gyi0mm.naekgrh7dctbN%matt@tidbits.com>,
> matt@tidbits.com (matt neuburg) wrote:
>
> > > I can't see any way of getting rid of that file without ditching the whole
> > > database and starting over again which is a lot of work to reset all the
> > > preferences, rules etc.. Is there anything less drastic I can do? Is this
> > > file dangerous or can I just ignore it?
> >
> > Yep, ignore it. m.
>
> One caveat. While it's safe to ignore it on your Mac, be sure you don't
> forward/redirect the infected file to a WinTel user (though they should
> have their own AV software).

The file described is a phishing scam and will only harm your financial
well-being if you follow one of its links. If the OP knew _which_
message contained the message, he could delete it. As it is, it is safe
to just ignore it,

--
Tom Stiller

PGP fingerprint = 5108 DDB2 9761 EDE5 E7E3
7BDA 71ED 6496 99C0 C7CF

Norman
Tue Jun 21 14:41:34 CDT 2005

1. Please advise on the name and version number of the virus detection
program you're using.

2. Perhaps process of elimination could help as you scan through the email
messages with attachments. First messages to be discarded would be those
from sources you don't know. This also could be a time to do some belated
Spring cleaning of messages with attachments that are not needed.

3. Consider going online to your program's tech support people. If nothing
else, it might help encourage the developers to come up with new technology.

Respectfully, Norm

On 6/21/05 2:01 AM, in article BEDE14A3.8737%kohutr@connexus.net.au, "Rudy
Kohut" <kohutr@connexus.net.au> wrote:

> Hi
>
> My virus program found the following file in the Entourage database:
> HTML.Phishing.Bank
>
> The Virus detection program isolates the entire database.
>
> I can't see any way of getting rid of that file without ditching the whole
> database and starting over again which is a lot of work to reset all the
> preferences, rules etc.. Is there anything less drastic I can do? Is this
> file dangerous or can I just ignore it?
>
> Thanks

JE
Tue Jun 21 15:05:57 CDT 2005

In article <tomstiller-E59A71.13320321062005@comcast.dca.giganews.com>,
Tom Stiller <tomstiller@comcast.net> wrote:

> The file described is a phishing scam and will only harm your financial
> well-being if you follow one of its links. If the OP knew _which_
> message contained the message, he could delete it. As it is, it is safe
> to just ignore it,

Ah, I only saw matt's reply with the OP's snip and jumped to the wrong
conclusion. Thanks for the correction.

(=?ISO-8859-1?Q?Corentin_Cras-M=E9neur?=)
Tue Jun 21 16:02:54 CDT 2005

Rudy Kohut <kohutr@connexus.net.au> wrote:

> I can't see any way of getting rid of that file without ditching the whole
> database and starting over again which is a lot of work to reset all the
> preferences, rules etc.. Is there anything less drastic I can do? Is this
> file dangerous or can I just ignore it?


If you don;t want ot ignore it and really want to clean it up, simply
search for an e-mail with attachment that would match this name and
trash it. That's it :-)

Corentin

--
--- Mac:MS MVP (Francophone) ---
http://www.mvps.org - http://mvp.support.microsoft.com
MVPs are not MS employees - Les MVP ne travaillent pas pour MS
Remove "NoSpam" to e-mail me - Retirez "NoSpam" pour m'écrire

Tim
Thu Aug 18 20:09:23 CDT 2005

On Tue, 21 Jun 2005 05:01:55 -0400, Rudy Kohut wrote:
> My virus program found the following file in the Entourage database:
> HTML.Phishing.Bank

Which virus program?

Michel
Fri Aug 19 05:59:50 CDT 2005

On 19.08.05 3:09, in article
0001HW.BF2AA9830004173CF03355B0@news.microsoft.com, "Tim Murray"
<no-spam@thankyou.com> wrote:

> On Tue, 21 Jun 2005 05:01:55 -0400, Rudy Kohut wrote:
>> My virus program found the following file in the Entourage database:
>> HTML.Phishing.Bank
>
> Which virus program?
>

FWIW, I downloaded ClamXav yesterday, and it also found a virus in my
database. Unfortunately, I forgot to write the virus' name down, but an
advanced rebuild of the database solved the problem.