Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Quarantine Manager will not unlock

Sophos noitfied me today that a piece of malware <Mal/Iframe-Whad arrived as an attachment to an email. However, when I opened the Quarantine Manager to manaually delete it, I could not get the QM to unlock. When I click on the lock icon, it just blinks and does not "open". Any suggestions?  

Sophos AV Ver. 8.0.6

:1009100


This thread was automatically locked due to age.
Parents
  • Ah; this is indeed useful:

    Aug 11 12:49:40 Mac-MBPro SophosAVAgent[51402]: CFPropertyListCreateFromXMLData(): Old-style plist parser: missing semicolon in dictionary.
    Aug 11 12:49:40 Mac-MBPro com.sophos.notification[80]: 2012-08-11 12:49:40.715 SophosAVAgent[51402:3403] CFPropertyListCreateFromXMLData(): Old-style plist parser: missing semicolon in dictionary.

     

    This tells us that when you clicked the lock, it attempted to access a plist (preferences) file, and failed because the file is corrupt.  This would also explain why some people are seeing this lock stuck in the unlocked state.

     

    I'd suggest running the following commands from Terminal.app (you'll need to run from an administrator account):

    sudo plutil –s ~/Library/Preferences/*.plist

    sudo plutil –s /Library/Preferences/*.plist

    sudo plutil –s /Library/Sophos\ Anti-Virus/*.plist

     

    You may also have to delete /Library/Caches/com.sophos.sau -- but this is only as a last resort.

    :1009166
Reply
  • Ah; this is indeed useful:

    Aug 11 12:49:40 Mac-MBPro SophosAVAgent[51402]: CFPropertyListCreateFromXMLData(): Old-style plist parser: missing semicolon in dictionary.
    Aug 11 12:49:40 Mac-MBPro com.sophos.notification[80]: 2012-08-11 12:49:40.715 SophosAVAgent[51402:3403] CFPropertyListCreateFromXMLData(): Old-style plist parser: missing semicolon in dictionary.

     

    This tells us that when you clicked the lock, it attempted to access a plist (preferences) file, and failed because the file is corrupt.  This would also explain why some people are seeing this lock stuck in the unlocked state.

     

    I'd suggest running the following commands from Terminal.app (you'll need to run from an administrator account):

    sudo plutil –s ~/Library/Preferences/*.plist

    sudo plutil –s /Library/Preferences/*.plist

    sudo plutil –s /Library/Sophos\ Anti-Virus/*.plist

     

    You may also have to delete /Library/Caches/com.sophos.sau -- but this is only as a last resort.

    :1009166
Children
No Data