Virus/malware/something

I just bought my macbook pro less then a month ago. It is already starting to run slow and the wheel is spinning a lot when it's "thinking". Not sure what is going on. I read that macbooks don't get viruses but I don't know if that’s true. When I put it is sleep mode and try to turn in back on it goes to a grey screen and has dots at the bottom that fill up like it's loading. After they load the screen turns into the normal login screen however the mouse doesn't work for about 35 sec, it turns into the spinning wheel several times, and then finally lets me type my password. I prefer to use firefox to safari. It also takes about a minute for firefox to start working. The mouse again turns into the spinning wheel and it takes a few moments for the page to load. Then it will work for a while and starts to run slow again and the mouse, again, turns into the spinning wheel and takes time for the pages to load. The same thing happens when I try to open other applications. It runs slow and the mouse turn into the spinning wheel and takes a while to open. Any ideas what is going on? Anyone know if it's a virus, or malware or something? Should I run some virus stuff or spyware stuff? What would be a good brand?

The next time you have the problem, note the exact time: hour, minute, second.
If you have more than one user account, these instructions must be carried out as an administrator.
Launch the Console application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Console in the icon grid.
Make sure the title of the Console window is All Messages. If it isn't, select All Messages from the SYSTEM LOG QUERIES menu on the left. If you don't see that menu, select
View ▹ Show Log List
from the menu bar.
Scroll back in the log to the time you noted above. Select any messages timestamped from then until the end of the episode, or until they start to repeat. Copy them to the Clipboard (command-C). Paste into a reply to this message (command-V).
When posting a log extract, be selective. In most cases, a few dozen lines are more than enough.
Please do not indiscriminately dump thousands of lines from the log into this discussion.
Important: Some private information, such as your name, may appear in the log. Anonymize before posting.

Similar Messages

How do I identify get rid of virus/malware/something bad?

How do I know what has gotten into my computer, and how do I get rid of it? Got little weird pop-up messages that said if it showed up several more times, it meant my "PC" was infected with a virus.   I tried to close it out and it wouldn't let me. I tried to Force Quit things, and at some point it threw a bigger window up on the screen, and right on top of that came a photo of a girl in a bikini asking me when I wanted to eff someone.
Using Mavericks 10.9.5.   Have just installed and run a Norton anti-virus program, which said I have no viruses. I realize that isn't the best software around, but it's free from Comcast and the first thing I could do.   I haven't had anything like this happen since I was on a PC
I was getting close to paying bills online, which clearly isn't the thing to do now.   What are my options as a low-tech user, and what are my official Apple options? Past Apple Care coverage date.   Tried to call to find options through them, was told there was a long hold time, then got disconnected.

If you saw a fake alert that "suspicious activity might have been detected," take Step B. Otherwise, take Step A when needed. In either case, remove the worthless Norton product according to the developer's instructions.
A
It's not malware. It's a JavaScript scam that only affects your web browser, and only temporarily. There are several ways to recover.
1. Some of those scam pages can be dismissed very easily. Press the key combination command-W to close the tab or window. A huge box will pop up. Press the return key and both the box and the page will close. If that doesn't happen, continue.
2. Press and hold command-W. You may hear repeating alert sounds. While holding the keys, click the OK button in the popup. A different popup may appear, which you can cancel out of as usual.
3. From the Safari menu bar, select
          Safari ▹ Preferences... ▹ Security
and uncheck the box marked Enable JavaScript. Leave the preferences dialog open.
Close the malicious window or tab.
Re-enable JavaScript and close the preferences dialog.
4. If the Preferences menu item is grayed out, quit Safari. Force quit if necessary. Relaunch it by holding down the shift key and clicking its icon in the Dock. None of the windows and tabs will reopen.
After closing the malicious page, from the menu bar, select
          Safari ▹ Preferences... ▹ Privacy ▹ Remove All Website Data
to get rid of any cookies or other data left by the server. Open your Downloads folder and delete anything you don't recognize.
B
You may have installed the "Downlite" or "VSearch" ad-injection malware. Follow the instructions on this Apple Support page to remove it.
Back up all data before making any changes.
Besides the files listed in the support article, you may also need to remove this item in the same way:
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those. If Safari crashes on launch, skip that step and come back to it after you've done everything else.
If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, then you may have one of the other kinds of adware covered by the support article. Follow the rest of the instructions in the article.
The problem may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This malware is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Still in System Preferences, open the App Store or Software Update pane and check the box marked
          Install system data files and security updates
if it's not already checked.

Firefox 4 crashes after windows recovery virus /malware infection

Hello My computer was infected by the "windows recovery " virus/malware when running Firefox 4 with administrator right user . I could get rid of the virus/malware using antivirus and antimalware sw ( superantispyware, antimalwarebytes, spybot and avast ) . Currently , no viruses or malwares are reporetd on my system . Still, when starting firefox.exe , the error message " firefox has encountered a problem and needs to close " is triggered and , although firefox starts and runs OK; it will close whenever a send/don't send option is taken on the error message . If I rename the Firefox.ex exe program into another name, Firefox runs OK and the error message is not triggered .
I have had superantispyware support run an analysis tool on my system and their feedback was that the infection, if any, can only be viral . I had AVAST run in F8 safe mode and no viruses are reported any longer after desinfection of the system where a couple of exes created by the malware were found/deleted . I tried uninstall/reinstall Firefox 4 and 3, but the problem remains . Also, I have looked for a crash report in the documents and settings folder but finds none . Last, I also tried to start firefox.exe in safe mode but it will not start ( it will well start if I rename firefox.exe into another name )
Thanks beforehand if you can suggest something to solve this .
Best regards Pierre W

Does it help if you create a new profile or uninstall and reinstall Firefox?
If you reinstall Firefox then be sure to remove the Firefox program folder to remove possibly left over files in it.
You can try to create a new profile as a test to check if your current profile is causing the problems.
See "Basic Troubleshooting: Make a new profile":
*https://support.mozilla.org/kb/Basic+Troubleshooting#w_8-make-a-new-profile
There may be extensions and plugins installed by default in a new profile, so check that in "Tools > Add-ons > Extensions & Plugins" in case there are still problems.
If the new profile works then you can transfer some files from the old profile to that new profile, but be careful not to copy corrupted files.
See:
*http://kb.mozillazine.org/Transferring_data_to_a_new_profile_-_Firefox
See also:
*http://kb.mozillazine.org/Firefox_crashes
*https://support.mozilla.org/kb/Firefox+crashes

Possible new virus/malware? slui.exe in %Userprofile%\AppData\Roaming

Hi,
I would like to start a discussion for one strange problem that I encountered in my company. Four Notebooks with Windows 7 x64 Enterprise SP1 versions all of a sudden after 1-2-3hours period cannot open any webpage trough any browser (IE,FF, Chrome) but
everything is pingable via command prompt. We made sure that it is not a DNS problem, whole network is functioning properly.
After one college called me because of the problem described above I started to dig trough the active processes that were running in that moment and slui.exe caught my attention because it was unusual for me to see that process even running. The process
itself is very small, only 54k. And starting folder is located in userprofile\AppData\Roaming\DNCache folder, in there are a couple of files (see picture bellow). That is not a location for slui.exe in my humble opionion, slui.exe resides in System32 folder.
You cannot delete the folder because it is being used, even with file unlocker it won't let you delete it. I went to SAFE mode and deleted it. Also in safe mode run msconfig and clear out any files that have "Unknown" manufacturer and start with
d..something, sorry cannot remember the correct name, but are the same as in DNCache folder. Our company uses Microsoft Forefront for protection. I am now waiting to see if I have solved the issue.
Could that be somekind of a virus/malware?
Thanks,

Hi,
Based on m research, “suli.exe” has not been recorded into MS data. It may be not a virus.
Best Regards
Quan Gu

Virus/malware in exchange panel download

I just downloaded the Exchange Panel, but did not install it because my security software alerted me that there was a virus/malware that could damage my computer and not to install it.
Is there any other way to access the tools available in Adobe Exchange?
I am not a professional user. I purchased one creative suite some years ago and worked with it until some of it was no longer relevant. But in tose times the Exchange (or its predecessor) was located on the adobe website and you could browse through available tools and ideas and download what you want.
Now I've gotten cs6 and it seems to me that all this interactive stuff is not an improvement if viruses and malware are part of the package. And because of the security threat, I now have no access to the extensions that would make web development easier.
Sorry if I seem disgruntled, but this development put a serious crimp in my day, my week.

The only problem here is that the screen that popped up was not the usual mcafee warning screen. Things I usually get say something like "This is an untrusted source and may contain . . ." This was a larger pop-up and said that it actually detected the presence of a virus or malware that could endanger my computer. In other words, it was a lot more affirmative in its assertion.
And since I have in the past ignored McAfee's gentler warnings and got stuck with pernicious add-ons that I had to spend a whole day tracing, deleting, restoring the previous state, I'm really reluctant to press the "install it anyway" button. Besdies, in addition to warning me, McAfee deleted the download once I agreed not to install it. Now, that's never happened before.

I think I got a virus from something called mac keeper

I think I got a virus from something called Mac Keeper. My Desktop folders and applications dissapeared

It's not a virus but MacKeeper is malware http://applehelpwriter.com/2011/09/21/how-to-uninstall-mackeeper-malware/

Virus & Malware Concerns

Are there anti-virus and/anti-malware apps that I should get on my iPad or is this not something of concern vs use of my PC?

Disregard that app, it now only works in conjunction with their control suite which is a business enterprise tool. It is from Sophos, if your company uses that you can then download the app. It does not scan for virus/malware that affects your iPad (there are none) it looks for PC viruses. They cannot affect your ipad.
You can search in the app store for "anti virus" and there are a few others (Virus Barrier, McAfee) but read the descriptions carefully and the reviews before buying.

I have a redirect virus/malware that I can't get rid of - Stopzilla ID MalPac.D - any suggestions

I have picked up either a virus or some malware that frequently redirects my browser to intermediate sites. Stopzilla calls it MalPac.D but repeated attempts to remove it with Stopzilla have failed. I tried to update my antivirus (Bitdefender) but every time I try to download it I get a message that the installer files are corrupt and the install fails. I installed a different antivirus product that also found some viruses and removed them but the redirect is still there.
I can go into tools>options>advanced>settings>advanced and find that there is a manual proxy server selected. If I just click on "No Proxy" the proxy setting will reset itself. If I just click on "No Proxy" and delete the info for the proxy server I can then do searches without redirects.
Any idea how I can find and get rid of the redirect virus/malware?

Try clearing Safari's cache : Settings > Safari > Clear Cache (and Clear History). You could also try turning on Block Pop-Ups on the same Settings page.
Also close Safari completely : from the home screen (i.e. not with Safari 'open' on-screen) double-click the home button to bring up the taskbar, then press and hold any of the apps on the taskbar for a couple of seconds or so until they start shaking, then press the '-' in the top left of the Safari app to close it, and touch any part of the screen above the taskbar so as to stop the shaking and close the taskbar.
You could also try a reset : press and hold both the sleep and home buttons for about 10 to 15 seconds (ignore the red slider), after which the Apple logo should appear - you won't lose any content, it's the iPad equivalent of a reboot.

How will i know if a virus,malware or spyware is d...

i hve scan my comp and it wont finish scanning 1 program files un-scaned and alcohol120 program files. i'm a bit woried about the privacy of our video call.. my wifes brother warned us of some virus that is includen on some sofwres that you might download on your pc. how will i know if a virus,malware or spyware is design to hack my video call on skype? can that proram files that cant be scned can be a form of virus of software that can hck my videocalls.. pls tell me how cn i know that..

Only a clean install can give you a clean chit.
But that is painful if you want to restore your applications and settings.
So called hacks are very rare and unlikely to be on your comp. Check Activity Monitor and if you see weird processes then you need to be worried; else you are generallly fine.
Have a lovely single malt with ice and water and relax...

HT4061 as of lately my iCloud mail box as been full of junk mail ....... in iCloud preferences you can only send 99 different address directly to trash? what Virus & Malware do you recommend for my iMac, iPad and iPhone ............ thank you !!!!

as of lately my iCloud mail box as been full of junk mail ....... in iCloud preferences you can only send 99 different address directly to trash? what Virus & Malware do you recommend for my iMac, iPad and iPhone ............ thank you !!!!

as of lately my iCloud mail box as been full of junk mail ....... in iCloud preferences you can only send 99 different address directly to trash? what Virus & Malware do you recommend for my iMac, iPad and iPhone ............ thank you !!!!

Can't get rid of virus/malware/infection

I have a virus/malware/infection that Office Max hasn't been able to get rid of and I purchased McAfee 2012 Antivirus Plus and even contacted McAfee for help. they want more money and I have already spent $173 and can't spend anymore.
I have all the programs needed for reloading the harddrive. I purchased all the programs a few years ago.
I have an HP Pavillion V5000 laptop. I need to know how to reformat the harddrive and will this get rid of the infections??
thank you,
Gregory

Hi,
These files would appear to relate to a Malware infection - the reason the specific DLLs cannot be loaded may well be because your existing security software has already removed them.
Try the following.
On another PC, follow the procedure on the link below to create a bootable CD which you can use to scan your computer and hopefully remove the Malware.
http://connect.microsoft.com/systemsweeper
When this has completed, boot into Windows, then download and install the free versions of MBAM and SUPERAntiSpyware on the links below.
MBAM
SUPERAntiSpyware
When installed, run full scans with both these utilities - if any malware is detected, remove/quarantine it and run the scan again until both applications come back clean.
If the above doesn't help, post back with the following.
1. The full Model No. and Product No. of the notebook ( from the service tag underneath your notebook ) - see Here for a further explanation.
2. The full version of the operating system you are using ( ie Windows 7 32bit ).
Regards,
DP-K
****Click the White thumb to say thanks****
****Please mark Accept As Solution if it solves your problem****
****I don't work for HP****
Microsoft MVP - Windows Experience

I have a virus - or something - where everyday someone is sending a spam email out to everyone on my mail list - how do i get it to stop?

i have a virus - or something where someone is getting into my mail and sending out spam email to everyone on my mail list - people who i hardly even know. how do i get this to stop?
thanks.

this is the message that is going out:
Subject: (no subject)
http://sharedimage.net/httq59foldroot2.php?subpage234
Make seri0us m0ney 0nline
Gone to see a friend is all right, but I wont have my love given tothem. marcylyn aethelwine
Mon, 2 Apr 2012 18:04:48
This mail has originated outside your organization, either from an external partner or the Global Internet.
Keep this in mind if you answer this message.
it is not going to my address book because a lot of these people are not in there. it is going to people that i emailed from years ago....and it IS connected to either my me.com email or a cox.net email - these are both connected. i'll try the password change on both of these mail accounts and see if that works. a lot of these people are getting three and four emails every day....

Help iMac w/Lion. Virus/malware Safari can't shutdown. Got pop up saying I won a prize. Did not select OK. Have to force shutdown. On restart of Safari get same pop up. Locks up Safari. Any help would be greatly appreciated.

PiCked up a virus/malware please help me get rid of it. While browsing with Safari got pop up saying I won a prize. Click OK to find out what I won. Did not click Ok, but cannot close Safari without using forced shutdown. Powering down computer and restarting then selecting Safari brings up same prize window. Just installed Trend Microsoftware for Mac. It's scanning now. Don't think it will work.
If I open another on same iMac everything seems ok.
Any help would be greatly appreciated.
Thanks

I am also running Lion and had the same problem: a persistent popup on top of a half-opened Safari window saying that I had won a prize and should click OK to claim it. If I forced Safari to quit, the same pages and popup menu would appear when I then reopened Safari. From what I can tell, the problem results simply from the fact that Safari in Lion defaults to auto-reopening web pages that were open when Safari last quit, including those suspicious pages that may have prompted the user to force-quit Safari in the first place. I solved the problem this way:
(1) After force-quitting Safari, I went to my user Library folder and found the Saved Application State folder within. I then found the folder for Safari (com.apple.Safari.savedState), opened it and deleted its contents. Now the next time I open Safari, there will be no pages to auto-reopen.
(2) Since this problem could happen again, I decided to disable the auto-reopen feature in Safari. I did this by highlighting the "com.apple.Safari.savedState" file and choosing the File-->Get Info command, and then in the Get Info box, I turned on the Locked checkbox. This prevents Safari from adding any files to this folder.
This solution has worked well for me, and it has the advantage of not requiring the user to reset Safari. It also preserves Lion's auto-reopen feature for all other applications.
I need to give credit to David Pogue for the information I used to solve this problem. He describes this procedure on page 169 of his book, Mac OSX Lion, the missing manual.
Steve

Browser Virus Malware Adware etc. HELP!

I have been trying for 3 days to kick this absurd problem off of my Macbook Pro. It feels like I have a virus/malware/adware situation that is making me feel like I'm back on a PC (UGHHHHH).
BEFORE THE PROBLEM:
I kept getting "scratchdisk" or "startup disk" is full notices so I could not download the new OS
I started searching the web for solutions
I started removing all unneeded files
I used Clean My Mac to remove unwanted/unneeded files
I downloaded OS X 10.9.5
THE PROBLEM:
The following things occur when I attempt to use any of the 3 browsers: Google Chrome, Safari, Firefox:
pop up windows appear ALL over the place
Pop up windows block my ability to use the intended web page
tabs automatically open for Wix, Mackeeper, Credit Check websites etc. (It's infuriating!)
Sites I am attempting to use fail to respond
ACTIONS TAKEN:
run Clean My Mac (nada)
delete all cookies (nada)
trash or uninstall any/all unknown apps/programs
uninstall Google Chrome
uninstall Firefox
reset Safari
some terminal exercise from an Apple forum (did...nada)
RESOLVE:
NOTHING seems to be working...I'm about to launch my computer out the window... HELP!?

There is no need to download anything to solve this problem.
A.
You may have installed the "VSearch" trojan. Remove it as follows.
Malware is always changing to get around the defenses against it. These instructions are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data before proceeding.
Step 1
From the Safari menu bar, select
          Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
Reset the home page and default search engine in all the browsers, if it was changed.
Step 2
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
          Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
The problem may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the Internet criminal behind VSearch has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
          Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
B.
Remove "MacKeeper" as follows. First, back up all data.
"MacKeeper" is a scam with only one useful feature: it deletes itself.
Note: These instructions apply to the version of the product that I downloaded and tested in early 2012. I can't be sure that they apply to other versions.
If you have incompletely removed MacKeeper—for example, by dragging the application to the Trash and immediately emptying—then you'll have to reinstall it and start over.
IMPORTANT: "MacKeeper" has what the developer calls an “encryption” feature. In my tests, I didn't try to verify what this feature really does. If you used it to “encrypt” any of your files, “decrypt” them before you uninstall, or (preferably) restore the files from backups made before they were “encrypted.” As the developer is not trustworthy, you should assume that the "decrypted" files are corrupt unless proven otherwise.
In the Finder, select
          Go ▹ Applications
from the menu bar, or press the key combination shift-command-A. The "MacKeeper" application is in the folder that opens. Quit it if it's running, then drag it to the Trash. You'll be prompted for your login password. Click the Uninstall MacKeeper button in the dialog that appears. All the other functional components of the software will be deleted. Restart the computer and empty the Trash.
☞ Quit MacKeeper before dragging it to the Trash.
☞ Let MacKeeper delete its other components before you empty the Trash.
☞ Don't try to drag the MacKeeper Dock icon to the Trash.

Do I have a virus/malware problem? Idiot needs help

Hello, Received an email from 'Royal Mail Global' saying that they had failed in delivering a package and to open the attached '.zip' file. Without thinking, I opened the file- it didn't launch anything. I realise this is incredibly stupid and I am mortified. However, I am now concerned that I have a virus, malware, etc. As I am a computer idiot: how do I check if a virus is on the system or a malware programme is stealing all my details? People say "you'll be ok, Mac's don't get virsus" but how do you know? I have encountered no issues, as yet.... I run OS X and have a mac mini. Please help- will be eternally grateful. Thank you in advance

MacHagan wrote:
Hello, Received an email from 'Royal Mail Global' saying that they had failed in delivering a package and to open the attached '.zip' file. Without thinking, I opened the file- it didn't launch anything.
First of all, your Lion OS would have notified you if that was anything currently known to be dangerous. If it was malware it was almost certainly designed for Windows and of no consequence to OS X. If you are certain that the email is spam/junk/hoax then use the delete button in your e-mail client to get rid of it. Check the trash folder and delete it from there, if necessary. If this is a Gmail account, let me know as there may be one more step.
When you say you opended the file, I assume you used an open button or double-clicked the attachment symbol? And then it didn't launch anything, but it should have launch the Archive Utility to unzip the attachment. Did that not happen? Did you see anything after you "opened it"?
Even if it was unzipped, sitting in an attachment folder somewhere and is malware, it won't do anything at all until you attempt to open it. And as I said previously, it's almost certainly for Windows users, anyway.
If you followed the suggestion to use ClamXav (or any other A-V software), there are some special considerations regarding e-mail. Here are my standard cautions:
Never use ClamXav (or any other A-V software) to move (quarantine) or delete e-mail. It will corrupt the mailbox index which could cause loss of other e-mail and other issues with functions such as searching. It may also leave the original e-mail on your ISP's e-mail server and will be re-downloaded to your hard drive the next time you check for new mail.
So, if you choose to "Scan e-mail content for malware and phishing" in the General Preferences, make sure you do not elect to either Quarantine or Delete infected files.
When possibly infected e-mail files are found:
Right-click/Control-click on either the infection or file name in the ClamXav window.
Select "Reveal In Finder" from the pop-up menu.
When the window opens, double-click on the file to open the message in your e-mail client application.
Read the message and if you agree that it is junk/spam/phishing then use the e-mail client's delete button to delete it (this is especially important when the word "Heuristics" appears in the infection name).
If you disagree and choose to retain the message, return to ClamXav and choose "Exclude From Future Scans" from the pop-up menu.
If this is a g-mail account and those messages continue to show up after you have deleted them in the above manner, you may need to log in to webmail using your browser, go to the "All Mail" folder, find the message(s) and use the delete button there to permanently delete them from the server.
For instructions on how to handle any infections that do not involved e-mail, use the Help menu or go directly to this link Dealing with Infected Files.

Virus/malware/something

Similar Messages

Maybe you are looking for