Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 6 subscribers
  • Views 3328 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Does "Move threat to Folder" -- not actually work?

stevemaser

So, my On-Access Scanning preferences (with Sophos 8.0.10) are set to:

When a threat is found:  Deny access and move threat

Move threat to folder:  <various folder locations tested>

If I download eicar.com from:  

http://www.eicar.org/85-0-Download.html

The file is downloaded.   Sophos flags this in the Qurantine Manger.

But the file is still in it's default downloaded location (which I've tried various locations as well...)

Am I missing what *should* be happening with the "move threat" option with malware downloaded with a web browser?   Or is this something that is not actually working?

:1011374


This thread was automatically locked due to age.
Parents
  • 0

    Hi Mark,

    Sounds like what you want is the action "Cleanup when threat is found" and if cleanup is unsuccessful you want "Delete threat". This should cover your needs.

    You say that you still need to visit the QM to clean things up. Can you tell me a little about the threats "stuck" in the QM? e.g. what is the threat name, where on your disk is it located, etc. A screen shot of your QM window might be super useful. Sounds like you might have some threats which aren't getting cleaned or deleted automatically, and that just isn't right.

    :1011530
Reply
  • 0

    Hi Mark,

    Sounds like what you want is the action "Cleanup when threat is found" and if cleanup is unsuccessful you want "Delete threat". This should cover your needs.

    You say that you still need to visit the QM to clean things up. Can you tell me a little about the threats "stuck" in the QM? e.g. what is the threat name, where on your disk is it located, etc. A screen shot of your QM window might be super useful. Sounds like you might have some threats which aren't getting cleaned or deleted automatically, and that just isn't right.

    :1011530
Children
No Data