This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos for Mac finds Win32/MyDoom in Outlook Temp folder. How to find the source of the worm

About once a day I get a popup from Sophos to tell me it has found malware in /Users/wmiller/Library/Caches/TemporaryItems/Outlook Temp .  The name is variable, usually something like sdr.com.zip (sdr.com is my email domai),  but they all seem to contain versions of Win32/MyDoom.  It is never clear if this is a threat to OS/X or where it came from.

These are the real questions: What is the threat and where does it come from?

This is a Mac running a Microsoft app, Outlook::Mac, which, of course, talks to MS servers running the other end of the mail server system (is it still called Exchange?) .  My first guess is that a Windows worm would not work on OS/X but since it is directed at search engines and phishes (as I understand it) , I wory that it might be able to use even Mac's java and do damage. 

So, how do I tell if the malware is coming in attached to emails?  I mostly get trusted email on my work email and have no reason to open anything but pdf's, spreadsheets, MS/Word docs and pictures, never any sense opening a Windows specific attachment.  If I follow a URL it most likely came from a trusted collegue.

So, am I getting the malware daily?  Am I passing it on?  How would I check?  I remove the detected file(s) but they come back.

Wes

:25073


This thread was automatically locked due to age.