Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 6 subscribers
  • Views 1732 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UPS and Tax Refund messages

brianb

I am being continually barraged by these two phishing and Malware emails (UPS Delivery and "Tax Refund Application" - as if!). The first comes in a batch of spam including the same one every time from Mariner Software so I suspect this is where my email address was obtained by the spammers.I run Sophos and erase and delete the emails and attachments in my library/mail/etc accounts but they raise their heads again like in Deliverance. Any ideas how to rid me of these troublesome trysts?

:1002461


This thread was automatically locked due to age.
Parents
  • 0

    If you're still getting detections after deleting the emails and attachments, with no new emails coming in, there's probably a copy of one of these stuck in a cache folder somewhere.  Your best bet is to do a custom scan and proceed as I've outlined here: http://openforum.sophos.com/t5/Sophos-Anti-Virus-for-Mac-Home/Troj-Chepvil-A-UPS-Delivery/td-p/2469/

    As an alternative, it's possible you've got a Time Machine backup that's already backed the item up -- after checking the path where the detection is found, navigate Time Machine to that location and right click the file to delete all backups.

    If it's not a backup, is it possible you've got this sitting on some external read-only file storage, such as a locked USB disk or Apple File Share?

    :1002479
Reply
  • 0

    If you're still getting detections after deleting the emails and attachments, with no new emails coming in, there's probably a copy of one of these stuck in a cache folder somewhere.  Your best bet is to do a custom scan and proceed as I've outlined here: http://openforum.sophos.com/t5/Sophos-Anti-Virus-for-Mac-Home/Troj-Chepvil-A-UPS-Delivery/td-p/2469/

    As an alternative, it's possible you've got a Time Machine backup that's already backed the item up -- after checking the path where the detection is found, navigate Time Machine to that location and right click the file to delete all backups.

    If it's not a backup, is it possible you've got this sitting on some external read-only file storage, such as a locked USB disk or Apple File Share?

    :1002479
Children
No Data