Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 6 subscribers
  • Views 1793 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Threat: Four On detected.....

ezkl2230

For some time I have been getting the following warning: "com.sophos.intercheck: 2012-07-31 13:40:27 -0400 Threat: 'Four On' detected in /private/tmp/xxxxxxxx.$$$"  The warning and related file disappears within moments.  I have been unable to trace the source of this threat, and information on line regarding Four On is sparse.

Any input to help me track this down and remove it will be appreciated. 

:1008662


This thread was automatically locked due to age.
Parents
  • 0

    I am trying to send this to you, and I have my preferences set up to move the threat to another folder on a drive not scanned by Sophos, but every time Four On is detected by the program I receive the message,  "Issue moving threat to folder," and Sophos deletes the infected file  The threat always occurs in the same folder, private/tmp.

    Any suggestions regarding how to capture this thing would be appreciated.  As I said, I have all of my preferences set to simply move the threat to another folder - NOT remove it.  This is becoming VERY frustrating.  Either this is a very well-engineered piece of malware, or there is a problem with Sophos and its ability to handle this virus in accordance with my preferences.

    :1011700
Reply
  • 0

    I am trying to send this to you, and I have my preferences set up to move the threat to another folder on a drive not scanned by Sophos, but every time Four On is detected by the program I receive the message,  "Issue moving threat to folder," and Sophos deletes the infected file  The threat always occurs in the same folder, private/tmp.

    Any suggestions regarding how to capture this thing would be appreciated.  As I said, I have all of my preferences set to simply move the threat to another folder - NOT remove it.  This is becoming VERY frustrating.  Either this is a very well-engineered piece of malware, or there is a problem with Sophos and its ability to handle this virus in accordance with my preferences.

    :1011700
Children
No Data