Virus detection when opening Outlook but no log and no quarantine available

Frances Ouseley

• November 09, 2020 10:00

Hi hope you can help :  everytime I open Outlook on my MAC Avira provides alerts every few minutes for different virus files starting with klcB-several numbers that changes at every detection. But the log button to identify where the virus file is located does not work and the file is not sent to quarantine. I have tried to run other antivirus but no viruses are detected. I wonder whether it is a virus false alert....in any case it is annoying to have this constant detection and I fear that files are created in my temp directory. Any idea how to solve this? I was thinking to reinstall from scratch outlook but not sure it is a good solution.   

Thank you

Yes 0 No

• 

  Lukas Huptas

  • November 09, 2020 10:13

  Hello Frances,

  Well, depending on your used Outlook version of macOS it's a quite difficult situation.

  Background: If an infected mail is received by Outlook, parts of the message are stored in a .pst/ .mdb file of Outlook even when the message is already deleted. Sadly, no other application is able to access (read/ write) this database file.

  With further Outlook versions, there's been an option to rewrite this .pst/ .mdb file straight from the Outlook settings. This option isn't available for a couple of years anymore.

  So, a clean reinstallation of Outlook is the only way to get rid of these left-over parts if you are using a supported version.

  Best,

  Lukas Huptas

  Avira Community Manager

  Yes 1 No
• 

  Frances Ouseley

  • November 09, 2020 11:23

  Thanks Lukas, I have an Outlook 2016 version, I will try to upgrade to a more recent one and see if the problem gets solved.  Thank for now. Best

  Frances

  Yes 0 No
• 

  Frances Ouseley

  • November 10, 2020 13:11

  Hi again

  Unfortunately after having cancelled the previous outlook 2016 installation - including the associated files in the Library Containers and Group containers - and installed a clear new version of outlook /office 365, AVIRA stil detects every 2 minutes files starting with klcB- and a sequence of numbers, that changes after each detection. But only when outlook is open. 

  Any idea how I can solve this?  Thanks

  Frances

  Yes 0 No
• 

  Frances Ouseley

  • November 10, 2020 14:04

  Those files are now quarantined and the log shows they are in /private/var/folders/jk/dxm9hxyx4yj56cjggs9x21z00000gn/T/com.microsoft.Outlook/Outlook Temp/kclB-1647366224[uPbO]

  so still associated with outlook

  Yes 0 No
• 

  Lukas Huptas

  • November 12, 2020 12:08

  Hello Frances,

  Please try this:

  • Deactivate on-access-scanner of Avira
  • Run macOS Terminal
  • sudo rm -f /private/var/folders/jk/dxm9hxyx4yj56cjggs9x21z00000gn/T/com.microsoft.Outlook/Outlook Temp/kclB-1647366224[uPbO]
  • Enter your password and hit "Enter"
  • Activate on-access-scanner

  Best,

  Lukas Huptas

  Avira Community Manager

  Yes 0 No

Please sign in to leave a comment.