Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 8 subscribers
  • Views 19983 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Troj/DocDl-EA

chrubble

I am getting a daily notification of this infected file in my Outlook Temp folder. I use Sophos quartantine manager to remove the threat, but it keeps coming back. Clearly the root of the problem is not being resolved. Any ideas what is depositing this file (sf_trans_7891048.doc) every morning and how to get rid of it?

Thanks.

:1020277


This thread was automatically locked due to age.
Parents
  • 0
    Its hard to know exactly what is going wrong, but here is a common problem: are you using an email service which synchronizes your local inbox with a remote server? Microsoft Exchange does this, as do generic IMAP mail servers. So even though the file gets removed locally, its still in your remote inbox (and gets copied back by your email client program). You need to find the email message containing this attachment and use your email client to delete it. That will delete it from the remote server as well as the local copy.

    ---

    Bob Cook (bob.cook@sophos.com) Director, Software Development

Reply
  • 0
    Its hard to know exactly what is going wrong, but here is a common problem: are you using an email service which synchronizes your local inbox with a remote server? Microsoft Exchange does this, as do generic IMAP mail servers. So even though the file gets removed locally, its still in your remote inbox (and gets copied back by your email client program). You need to find the email message containing this attachment and use your email client to delete it. That will delete it from the remote server as well as the local copy.

    ---

    Bob Cook (bob.cook@sophos.com) Director, Software Development

Children
No Data
Unfiltered HTML