Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Scan Local Drive Question

When I installed Sophos, I thought it would be a good idea to scan the whole Mac once. That was days ago. It has barely moved. There are over 5 million items, of course, but still, this seems unreasonable. It is slow whether I do nothing or continue to work. I leave it on all night to let it run in peace, but it has not progressed far by morning. Is there any way to speed this up? 

Right away, it identified 3 threats. I removed them as instructed, but they still remain in the main window. Should I delete them?

I am using the latest Snow Leopard version on an iMac with 4 GB ram. It is also slowing down everything else I do. 

:1003153


This thread was automatically locked due to age.
Parents
  • Regarding the 24 threats vs 3 threats: there are 24 unique detections in your files, and 3 threat names implicated.  This means that on average, you have 8 instances of each threat detected.

    Regarding resumed scans, I believe this is not the case; too many things can change in the filesystem between scans for this to be workable.

    If you're slowing down that much with archive scanning disabled, some more investigation might be a good idea; non-archive scans are usually quite fast, and quietly sit in the background allowing you to get your real work done.  I would guess that you have a file (likely a large PDF) that triggers a few detections and has many layers of analysis done on it before the file is determined to be clean/infected.  After you've cleaned up the threats, I'd be interested to see if performance is still as bad as you've reported.

    :1003187
Reply
  • Regarding the 24 threats vs 3 threats: there are 24 unique detections in your files, and 3 threat names implicated.  This means that on average, you have 8 instances of each threat detected.

    Regarding resumed scans, I believe this is not the case; too many things can change in the filesystem between scans for this to be workable.

    If you're slowing down that much with archive scanning disabled, some more investigation might be a good idea; non-archive scans are usually quite fast, and quietly sit in the background allowing you to get your real work done.  I would guess that you have a file (likely a large PDF) that triggers a few detections and has many layers of analysis done on it before the file is determined to be clean/infected.  After you've cleaned up the threats, I'd be interested to see if performance is still as bad as you've reported.

    :1003187
Children
No Data