Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unable to delete Outlook SPAM with a malware payload

While using Outlook 2011 for Mac, I've recently received several SPAM messages with attached files containing Windows trojans or other malware.  Once these messages arrive in my inbox, I see a warning from Sophos Antivirus and Outlook freezes.  If I attempt to select the message, it highlights, but no action is possible.  If I right click and select "delete" the highlighting jumps to a random message while the SPAM message remains in the inbox.

While this is happening, the Sophos quarantine manager attempts to delete the threat, but Outlook keeps downloading new copies to the cache.  The only escape requires force-quitting Outlook.  If I then restart Outlook, the problem resumes.
If I access the Exchange server using Outlook Web Access, I am unable to delete the SPAM message, or any other message.  I just get an error stating that there's a server configuration problem.
The only way I can recover from this situation is to log on to a Windows 7 box, open Outlook 2010 and delete the message.  Outlook on Windows has no problem deleting the message.  I can then run Sophos antivirus to clear the cached malware attachment.
All the malware has been Windows oriented, so there's no threat to my Mac, but losing the use of Outlook while being unable to delete a SPAM message is more than a little disturbing.
There does not seem to be any preference I can set to keep Outlook from automatically downloading attachments.
I'm running OS X 10.6.8, Sophos 8.0.5c and up to date versions all the Office 2011 products.
:1008117


This thread was automatically locked due to age.
Parents
  • What server do you have backing your outlook client?  GMail over IMAP?  ISP over POP3?  If POP3, do you have it set to keep the messages on the server for X amount of time?

    It'd be good to figure out at which point this weirdness is being triggered (likely that Outlook gives up too soon and re-tries when Sophos has the file handle locked -- but if on-access is disabled, this should not be an issue).

    :1008972
Reply
  • What server do you have backing your outlook client?  GMail over IMAP?  ISP over POP3?  If POP3, do you have it set to keep the messages on the server for X amount of time?

    It'd be good to figure out at which point this weirdness is being triggered (likely that Outlook gives up too soon and re-tries when Sophos has the file handle locked -- but if on-access is disabled, this should not be an issue).

    :1008972
Children
No Data