I recently discovered after running ClamXav that I have a possible
virus in my Entourage Database. It is called HTML.Phishing.Bank-50.
contains all of my email, etc. So what do I do?
Rick
This is bound to happen from time to time. A phishing email (a scam email
trying to get your bank login details by deception - see here:
<
http://en.wikipedia.org/wiki/Phishing>) sent to you is probably sitting in
your Junk mail folder (or maybe you inbox). Clam X has scanned the database
and detected the tell-tale signs, so reports (quite correctly) that the file
is infected.
As you are aware, you can't delete the database, neither can Clam X repair
it, so you can only check through the mail in Entourage, paying particular
attention to the Junk mail folder and the deleted items folder. If you find
the mail, delete it. Make sure you also delete it from the deleted items
folder.
Even then, Clam X may still report the file infected, because when items are
deleted from entourage they are not immediately overwritten, rather the
space in the database is marked as 'available' and will be written over by
some new item at some point in the future. This means that Clam X will
probably still detect the fingerprint of the Phishing mail until it gets
overwritten, but there is nothing at all to worry about.
Personally, I would exclude the database from Clam's regular scans, because
if it finds an infected email (fairly likely) there is nothing you can do
about it, and scanning very large files like the database will slow Clam
down so much it will have an effect on system performance.
