Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 6 subscribers
  • Views 4819 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Drag and drop to custom scan

mikeroy22

I've just done my first Sophos scan of my mac and it's showing 6 threats which need to be cleaned up manually. This is where I seem to have a problem as I cant seem to be be able to select the threats and drag them to the custom scans for it to delete them. I've opened up the help page titled "add a threat to a custom scan" but I cant seem to be able to drag the selected files using either of the two suggested methods - is it me just being thick or what?

Any suggestions greatly appreciated - thanks

:1006079


This thread was automatically locked due to age.
Parents
  • 0

    The safest way to remove files from a Time Machine backup is via the Time Machine interface.  Sophos is VERY conservative about removing items from within Time Machine backups, as some TM configurations can break if some other interface messes with the file structure.

    To remove malicious files from TM backups by hand, check the file path the detection indicates, and note the segment of the path that tells you which backup the file is in...

    eg: /Volumes/TMBackupDrive/Backups.backupdb/MyComputerName/2011-12-01-095144/MyHD/System/Library/Video/Plug-Ins/MaliciousFile.sh

    This tells you to go to the Finder, hit command-shift-G, and enter /Volumes/MyHD/System/Library/Video/Plug-Ins/ into the location bar, and click "go".  Then, select Time Machine from the menu bar, and enter time machine.  Once in Time Machine, navigate to the date (in this case, Thursday, 1 December, 2011), right-click the file (MaliciousFile.sh), and select "Delete All Backups of 'MaliciousFile.sh'."

    Exit Time Machine, and you're done!

    :1006103
Reply
  • 0

    The safest way to remove files from a Time Machine backup is via the Time Machine interface.  Sophos is VERY conservative about removing items from within Time Machine backups, as some TM configurations can break if some other interface messes with the file structure.

    To remove malicious files from TM backups by hand, check the file path the detection indicates, and note the segment of the path that tells you which backup the file is in...

    eg: /Volumes/TMBackupDrive/Backups.backupdb/MyComputerName/2011-12-01-095144/MyHD/System/Library/Video/Plug-Ins/MaliciousFile.sh

    This tells you to go to the Finder, hit command-shift-G, and enter /Volumes/MyHD/System/Library/Video/Plug-Ins/ into the location bar, and click "go".  Then, select Time Machine from the menu bar, and enter time machine.  Once in Time Machine, navigate to the date (in this case, Thursday, 1 December, 2011), right-click the file (MaliciousFile.sh), and select "Delete All Backups of 'MaliciousFile.sh'."

    Exit Time Machine, and you're done!

    :1006103
Children
No Data