Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 6 subscribers
  • Views 4380 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to remove files manually

Esteph

I'm new to Sophos but i can't work out what to do next.

My first local drive scan has identified three trojan files in Java that would pose a threat to a Windows system. Quarenteen Manager tells me to clean manually. The web pages for these threats tell me to create a custom scan - which I have done and run. The results in the main window tell me that the three files pose 3, 2, and 2 threats, respectively.

What do I do to remove them?  Do i just navigate to them in the finder and delete them? The Sophos guide doesn't appear to tell me how to actually remove them. Or have i missed something?

The scan said three files but one of them appears to be a repeat

The files are:

1eff1eb1-1066cdf4

1dd6a40c-46052b7a

Any help?

:8847


This thread was automatically locked due to age.
Parents
  • 0

    HI,

    What was is the name of the threat they are reported as?

    Can you go into the Quaratine Manager of SAV, locate the theat(s), they/it should have a name.  Also from the Quaratine Manager you can copy the location on disk "Copy name" for each detection and paste them here, that would really help with the decision as to what to do? 

    Update:

    Actually having seen this is in "Free tools" section, is this the free Mac product?  In which case:
    http://openforum.sophos.com/

    might be a better forum for this but as a general rule, trojans don't infect files so they can typically be deleted.  My only concern telling you to do that is that there is always a chance it's a false positive.

    Thanks,

    Jak

    :8849
Reply
  • 0

    HI,

    What was is the name of the threat they are reported as?

    Can you go into the Quaratine Manager of SAV, locate the theat(s), they/it should have a name.  Also from the Quaratine Manager you can copy the location on disk "Copy name" for each detection and paste them here, that would really help with the decision as to what to do? 

    Update:

    Actually having seen this is in "Free tools" section, is this the free Mac product?  In which case:
    http://openforum.sophos.com/

    might be a better forum for this but as a general rule, trojans don't infect files so they can typically be deleted.  My only concern telling you to do that is that there is always a chance it's a false positive.

    Thanks,

    Jak

    :8849
Children
No Data