\jon.html

[trackdown_charlie]

Version: 2004
Operating System: Mac OS X 10.5 (Leopard)
Processor: Intel

Hello again and thanks for the help.

I have a folder that holds 9 Word documents, all you see are the nine document icons in that window. When I open a document to work then close it later, the \jon.html appears as a file with a small Safari icon in that same folder window. I can throw it away and empty the trash but it appears again as soon as I open and close another document. Likewise, if I have a Word document on my desktop, open and close it, the \jon.html file appears on my desktop.
I used NAV - it identified it as a macro and seemed to temporarily fix the problem, or at least thought it did. At least it was gone for some time. I've since uninstalled NAV, it seemed to make my computer a bit unstable, for lack of a better word.
I've heard of clamav but thought it was specifically for email- I'll check it out. thanks

 

[John McGhie]

Yes, I would agree: NAV is my least favourite anti-virus. It does seem to
cause more problems than it fixes.

It obviously has not fixed that one: this is "classic" Virus behaviour. It
sounds as though you have been hit by a key-logger that is attempting to
send each document you open off to the mothership. These are quite
dangerous.

I have had good results with MacAfee on the Mac. You may have to buy it,
but I would suggest that the infection you have may be a bit beyond ClamX
AV.

ClamX is a good product: I like it, and I use it, but it's not really what
you would call "industrial strength".

Cheers

Version: 2004
Operating System: Mac OS X 10.5 (Leopard)
Processor: Intel

Hello again and thanks for the help.

I have a folder that holds 9 Word documents, all you see are the nine document
icons in that window. When I open a document to work then close it later, the
\jon.html appears as a file with a small Safari icon in that same folder
window. I can throw it away and empty the trash but it appears again as soon
as I open and close another document. Likewise, if I have a Word document on
my desktop, open and close it, the \jon.html file appears on my desktop.
I used NAV - it identified it as a macro and seemed to temporarily fix the
problem, or at least thought it did. At least it was gone for some time. I've
since uninstalled NAV, it seemed to make my computer a bit unstable, for lack
of a better word.
I've heard of clamav but thought it was specifically for email- I'll check it
out. thanks

--

Don't wait for your answer, click here: http://www.word.mvps.org/

Please reply in the group. Please do NOT email me unless I ask you to.

John McGhie, Microsoft MVP, Word and Word:Mac
Nhulunbuy, NT, Australia. mailto:[email protected]

 

[CyberTaz]

It sounds like the malicious devil may have infiltrated your Normal
template.

With no Office apps running follow the guidelines here for testing a new
Normal & see if that helps:

http://word.mvps.org/mac/MacWordNormal.html

Regards |:>)
Bob Jones
[MVP] Office:Mac

 

[John McGhie]

Useful advice!

However, I think if it had been in the Normal template, NAV would have found
it. That's the first place it should look.

OK, NAV is at the bottom end of capability amongst the "Commercial" A/V
products, but surely it can't be so bad it misses a virus in Normal?

Or are they still doing that brain-dead "We only look for Mac viruses on the
Mac!"? I thought they stopped that!

Cheers

It sounds like the malicious devil may have infiltrated your Normal
template.

With no Office apps running follow the guidelines here for testing a new
Normal & see if that helps:

http://word.mvps.org/mac/MacWordNormal.html

Regards |:>)
Bob Jones
[MVP] Office:Mac

--

Don't wait for your answer, click here: http://www.word.mvps.org/

Please reply in the group. Please do NOT email me unless I ask you to.

John McGhie, Microsoft MVP, Word and Word:Mac
Nhulunbuy, NT, Australia. mailto:[email protected]

 

[CyberTaz]

I tend to agree, John - that's why I didn't go there sooner But from
the description I get the impression that it could be a macro which is
innocuous enough to not be recognized as a virus. There were a few of these
things floating around maybe 10 years ago. Most A/Vs picked them up in the
resulting docs - IIRC - but overlooked the root cause.

I'm not sure by any means - it will be interesting to hear back form the OP.

Regards |:>)
Bob Jones
[MVP] Office:Mac