When I click on a one specific email in outlook to preview the message I get the following virus warning from McAfee popping up. Each time I move off it and select again I get another :confused:

 

Any ideas? It says the trojan cannot be cleaned and has been moved.

 

The email is just a payment received notification from paypal, although some of the message is a bit messed up with a load of stuff like

 

"LANGUAGE="JavaScript1.1" charset="iso-8859-1" SRC="https://paypalssl.doubleclick.net/adj/paypal.uk/ReceivedMoneyReceipt-email;lang=;sz=191x170;tile=3;ord=8317559?">"

 

where there are normally pictures I think.

 

I run AVG, AdAware, Spyware Blaster, cwshredder, which I keep up to date and McAfee came with the the PC.

 

Cheers

 

Pete

TBH i think McAfee is crap, always used Norton. try using another virus software, that might help/solve the probleme

I do, I use AVG, McAfee was just on the computer pre-installed and I've not had any reason to remove it :)

Not Norton pantsware?...do a search on google for the trojan and go to an online scan from one of the good providers...will take a while to do a full scan but worth it....

Not Norton pantsware?...do a search on google for the trojan and go to an online scan from one of the good providers...will take a while to do a full scan but worth it....

 

Not finding anything, just doing a full sweep with AdAware which is picking up it's usual host of nasties, so I'll see if they show up in the log.

 

Why would previewing that one specific email throw the virus alert up though??

The answer lies here:

 

"LANGUAGE="JavaScript1.1" charset="iso-8859-1" SRC="https://paypalssl.doubleclick.net/adj/paypal.uk/ReceivedMoneyReceipt-email;lang=;sz=191x170;tile=3;ord=8317559?">"

 

The error is a JS error i.e java script trojan, the code is in the page.

http://vil.nai.com/vil/content/v_132207.htm

 

I would clear out my temp and temp internet files directories...

http://www.antivirusprogram.se/virusinfo/JS/Exploit-Script_3651.html

 

hth

Ah cool thanks mate :cool:

 

The email is from paypal though :wack: And looking further down my inbox I have another with the same html text in it and it gives the same virus warning.

It looks like the virus has been moved but not deleted, probably to the virus vault, rather than being executed, which is good.

 

Are you sure these are genuine Palpay payment notifications ? I suspect they're not, just delete them and then log on to Paypal direct to see what you have really got.

The answer lies here:

 

"LANGUAGE="JavaScript1.1" charset="iso-8859-1" SRC="https://paypalssl.doubleclick.net/adj/paypal.uk/ReceivedMoneyReceipt-email;lang=;sz=191x170;tile=3;ord=8317559?">"

 

The error is a JS error i.e java script trojan, the code is in the page.

 

spot on;)

 

i often get virus warnings from mcfee if it sees to many backwards and forwards emails, as for norton i would never put it near any of my machines again, its worse than having a nagging wife and when you come back from the pub it's still there :headvswal

mcfee imo never intrudes just does its job