Re: ClamXAV and Exploit.PDF-2640 alert


Mike wrote:
Erik Richard Sørensen <NOSPAM@xxxxxxxxx> wrote:
The only cure is to remove the specific PDF file from the DiscCover 2 app and replace it with a fresh one from the CD. - Since the Toast 'installers' is just a folder, you should be able to right-click on the DiscCover.app and then open the 'Content' folder and find the PDF file in it's location and the just copy it to your own copy of DiscCover. - Or you could simply delete the installed version on yhour HD and afterwards drag the 'Disc Cover 2.app' from the Toast 10 Titanium folder to your Toast 10 Titanium folder.

If you choose this you MUST delete your installed copy first using 'Secure Delete'.

So there is no need for you to delete ClamXAV again, just enable the and your mailboxes will also be watched, and if you shuld happen to get something like that again, Sentry will alert you immediately.

The "exploit" is in the latest updater from Roxio. I purchased Toast 10 via download so I don't have a CD (except my Toast backup of course).

I went to Roxio's web site and DL'ed the latest updater image again, immediately locked, mounted and scanned it. The problem file is definitely coming from Roxio. It'a simple matter to delete the file from the application package - I've done that. I don't even use DiscCover so I should just delete the app.

OK, then it isn't one of those nasty self-renaming PC vira which can be resend randomly...

The reason I don't have the same problem then, might be that I still use the 10.0(530) - i.e. the orig. main release. I have the latest update on my disk, but haven't yet installed it, and I think that I'll skip that version.:-)

I'll activate ApplicationSentry just to watch for this kind of stuff. Don't want to pass anything on.

Yes, it is a good thing to have a watching eye on the inboxes. Two times within the last half year I caught such a resendable PC virus and one time on my WinXP also on the MacPro. Avast! antivirus for Windows caught it and deleted it at once...

ClamXAV, Norton Antivirus and Avast! Mac Edition are the only apps that even are capable of scanning inboxes in mail apps. ClamXAV is free, NAV and Avast! are payware, so at least until NAV or the Avast! for Mac are fully up-to-date and compatible with any system from 10.4 and up I'll stay with ClamXAV. Avast! offers good discount prices on bundles, if you're running both Mac and Win versions. The real good thing I like in Avast! is that even the Win version is capable of scanning Mac HFS+ disks if they are running as shared disk in Windows. - So when Windows is active, I infact have a 'double-security'.:-)

Cheers, Erik Richard

--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Erik Richard Sørensen, Member of ADC, <mac-manNOSP@xxxxxxxxxxxx>
NisusWriter - The Future In Multilingual Text Processing - www.nisus.com
OpenOffice.org - The Modern Productivity Solution - www.openoffice.org
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.

Relevant Pages

  • Re: ClamXAV and Exploit.PDF-2640 alert
    ... 'installers' is just a folder, you should be able to right-click on the ... DiscCover.app and then open the 'Content' folder and find the PDF file ... The "exploit" is in the latest updater from Roxio. ... I should just delete the app. ...
    (comp.sys.mac.system)
  • Re: Newbie Questions
    ... applications folder within their home folder for apps they do not wish ... > the switched-to app's body window to the foreground and sometimes not. ... > also not do it when none of my apps is the current app. ... > - How can I play a song with iTunes without bringing up an iTunes UI? ...
    (comp.sys.mac.system)
  • Re: Security Exception when deploying a VB.NET 2003 Solution
    ... It runs fine on any workstation. ... folder 2 levels up from the BIN folder where the application resides. ... Microsoft .NET security errors upon trying to start the Executable. ... I bet the workstaion is WinXP and your app is trying to write data( ...
    (microsoft.public.vsnet.general)
  • Re: Design Guidelines for Non-Power Users?
    ... Non-Power Users and Admins will not be able to install your app. ... You can get whatever this folder happens to be by ... If they don't have write permissions, ...
    (microsoft.public.vb.general.discussion)
  • Re: Design Guidelines for Non-Power Users?
    ... Non-Power Users and Admins will not be able to install your app. ... You can get whatever this folder happens to be by ... If they don't have write permissions, ...
    (microsoft.public.vb.winapi)