Re: [Evolution] Deleting mail with virii?

[Ron Johnson <ron l johnson cox net>]

On Wed, 2006-04-19 at 07:36 -0400, William Case wrote:
> Hi Ron;
>
> On Tue, 2006-18-04 at 23:28 -0500, Ron Johnson wrote:
> > On Tue, 2006-04-18 at 21:55 -0400, William Case wrote:
> > > Hi;
> > >
> > > I have just installed and run clamav.  clamscan found 49 corrupted files
> > > in ~/.evolution and ~/.evolution2.  Some of them from restored /home
> > > files from previous versions of Fedora.  I am not blaming anyone.  What
> > > I need to know is can I just go into my mail cache and delete those
> > > infected email files?  Or will that screw up indexing or something?
> >
> > Is local mail cached?  For IMAP mail, here's what I'd do:
>
> I don't use IMAP.  All the mail is downloaded from my rogers/yahoo.
> Rogers is my cable company.
>
> > > From an xterm prompt:
> > $ acct=me\ haggis
> > $ evolution --force-shutdown
> > $ rm -rf ~/.evolution/mail/imap/${acct}/folders/INBOX
> >
> > Next time I open a folder on an IMAP server, Evo will re-cache what
> > is necessary.
>
> Some of the offending mail is in .evolution and some in .evolution2.
> As you can tell, I have left learning about mail until later.  I guess
> later is now.
>
> Sample message from clamav:
> "/home/bill/.evolution2/mail/pop/wmcase pop broadband rogers com/cache/31/ca59f62609ca94efc11383fe3827ee2c: 
> Exploit.IFrame.Gen FOUND"

OK.  The same theory will apply.

$ evolution --force-shutdown
$ rm -rf ~/.evolution2/mail/pop/wmcase pop broadband rogers com/cache
$ rm -rf ~/.evolution/mail/pop/wmcase pop broadband rogers com/cache

Note, though, that ~/.evolution2 is deprecated.

-- 
-----------------------------------------------------------------
Ron Johnson, Jr.
Jefferson, LA USA

"A partnership with Microsoft is like a Nazi non-aggression pact.
It just means you're next."
www.stanford.edu/group/mmdd/SiliconValley/Ferguson/Chapter.5.html