This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Does "Move threat to Folder" -- not actually work?

So, my On-Access Scanning preferences (with Sophos 8.0.10) are set to:

When a threat is found:  Deny access and move threat

Move threat to folder:  <various folder locations tested>

If I download eicar.com from:  

http://www.eicar.org/85-0-Download.html

The file is downloaded.   Sophos flags this in the Qurantine Manger.

But the file is still in it's default downloaded location (which I've tried various locations as well...)

Am I missing what *should* be happening with the "move threat" option with malware downloaded with a web browser?   Or is this something that is not actually working?

:1011374


This thread was automatically locked due to age.
Parents
  • Hello maser,

    indeed it is neither moved nor is there any indication that a move is attempted (one should get an error if it fails). To make sure I've tried the same on Windows - and there it does move. That's IMO definitely not how it's supposed to work (despite the fact that, according to the help, you should use this setting only when advised by support).

    Christian

    :1011380
Reply
  • Hello maser,

    indeed it is neither moved nor is there any indication that a move is attempted (one should get an error if it fails). To make sure I've tried the same on Windows - and there it does move. That's IMO definitely not how it's supposed to work (despite the fact that, according to the help, you should use this setting only when advised by support).

    Christian

    :1011380
Children
No Data