Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 21 replies
  • Subscribers 6 subscribers
  • Views 15250 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Manual Cleanup

Nuts4Cats

Have the Lion updated Sophos for Mac. 99% of the threats that appear are not cleaned up automatically but must be handled manually. I now have 25 threats, all on my Time Machine drive. I created a custom scan for the TM drive, where all these threats are located. It ran for two days with no end in sight, and it was wreaking havoc with my computer's functionality. Ultimately, I had to restart the iMac today, thus canceling the scan, which I had my doubts about anyway. It it supposed to take so long?

I looked at a couple of the threats, not all, and I suspect they are all for Windows only. At this point, should I just clear them from the list? I have never been able to get a custom scan to work properly, and just on general principles I would like to make sure I have not done something wrong. Has anyone else had this problem where it just runs endlessly?

:1007189


This thread was automatically locked due to age.
Parents
  • 0
    CALF wrote:

    Thanks for the advice. I worry about being able to find the threats within TM, though. Would they all be located in the same place? And do I have to go back to all the backup copies or only the last one? 

    I thought I had already excluded my external HDs already and just chose the main drive. I was surprised to get all of these, especially all of a sudden. It's as though something had changed without my having done anything new. But it occurs to me that you may be talking about something else as I'm not sure what "on-access" and "on-demand" scans refers to. If you could give me instructions for doing that, I surely would appreciate it.

    Apropos of nothing to do with this subject, every time I come back to the forum, my password doesn't work, and I have to recreate it every time. What might be going on?

    The path you find in the Quarantine Manager will be the literal path to the file on the TM volume,  The path within TM will start after the date stamped portion of the path. When you locate a file, right click on it and select "delete all backups" -- this will remove all copies, not just the one you've selected.

    If you go to the preferences in Sophos Anti-Virus, you'll see an On Demand and an On Access section.  On Access is always running in the background, scanning any file as it is created, read or written to.  On Demand refers to when you manually click the scan button in the main window of the Sophos Anti-Virus app itself.  On Demand scans don't let you exclude external drives; you need to create a custom scan to do that.  This means that you likely excluded them from the on-access section.  However, you need to exclude the Time Machine virtual drive if it creates a custom mount point when TM is active (this depends on your TM configuration) -- so it's possible that you didn't actually exclude the TM virtual volume, but just the external drive it resides on.

    I don't know what's up with the password situation, but I'd guess you're using some sort of cookie management, and it's causing a site cookie that holds authentication state to fail -- it's been my experience that this usually doesn't happen for the session where you register accounts, even if the cookie is later set for a regular login.  Not sure if this forum works that way, but I've had issues with TACO killing my logins in the exact same way on other sites.

    :1007209
Reply
  • 0
    CALF wrote:

    Thanks for the advice. I worry about being able to find the threats within TM, though. Would they all be located in the same place? And do I have to go back to all the backup copies or only the last one? 

    I thought I had already excluded my external HDs already and just chose the main drive. I was surprised to get all of these, especially all of a sudden. It's as though something had changed without my having done anything new. But it occurs to me that you may be talking about something else as I'm not sure what "on-access" and "on-demand" scans refers to. If you could give me instructions for doing that, I surely would appreciate it.

    Apropos of nothing to do with this subject, every time I come back to the forum, my password doesn't work, and I have to recreate it every time. What might be going on?

    The path you find in the Quarantine Manager will be the literal path to the file on the TM volume,  The path within TM will start after the date stamped portion of the path. When you locate a file, right click on it and select "delete all backups" -- this will remove all copies, not just the one you've selected.

    If you go to the preferences in Sophos Anti-Virus, you'll see an On Demand and an On Access section.  On Access is always running in the background, scanning any file as it is created, read or written to.  On Demand refers to when you manually click the scan button in the main window of the Sophos Anti-Virus app itself.  On Demand scans don't let you exclude external drives; you need to create a custom scan to do that.  This means that you likely excluded them from the on-access section.  However, you need to exclude the Time Machine virtual drive if it creates a custom mount point when TM is active (this depends on your TM configuration) -- so it's possible that you didn't actually exclude the TM virtual volume, but just the external drive it resides on.

    I don't know what's up with the password situation, but I'd guess you're using some sort of cookie management, and it's causing a site cookie that holds authentication state to fail -- it's been my experience that this usually doesn't happen for the session where you register accounts, even if the cookie is later set for a regular login.  Not sure if this forum works that way, but I've had issues with TACO killing my logins in the exact same way on other sites.

    :1007209
Children
No Data