Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Possible Bug?

I originally posted this on the main Sophos forums and was chastised and told to post it here. I was directed to do this by a forum moderator, so please do not criticise me for cross-posting.

I have noticed an odd situation. I am using the free Mac edition on Lion. Sophos keeps reporting infection in a couple of files in my Time Machine backup. But it does not report infection of the same files on the primary drive where the primary/original copies of those files reside. It simply doesn't make sense that the primary/original copy of a file could be free of infection and the backup copy made from that primary/original file could be infected. Rationally, one of these things is wrong: Rationally, either they are both infected or neither are infected. Not sure which is the case, but it certianly shakes myfaith in Sophos AntiVirus.

Update: Since my initial posting on the main forums, I've noticed one additional apparant anomoly in this matter. Amoung the multiple references to "Original Locations" for each infected file are some "Original Locations" which seem to make no sense. For example, a reported infected Windows .DLL file includes an identification of originally being a .WMA file, and a reported infected Windows .EXE  file includes an identification of originally being a .RM file. Ignoring the fact that these "original location" references are nonsensical, even if we were to accept for the moment that these file name/format transformations did somehow occur, there is still the fact that these referenced "original" files do not report as being infected. As I say, all this certianly shakes my faith in Sophos AntiVirus.

As I mention in the thread on the main forums, my posting was and is in reference to a possible bug and to (hopefully) bring the matter to the attention of the Sophos folks so that if it is a bug it can be addressed. This is not principly a request for support or assistance to solve/explain my dilema, although such will be gladly accepted.

:1008143


This thread was automatically locked due to age.
Parents
  • Spike/QC,

    I quess part of the problem stems from the lack of clarity on the part of Sophos. When someone has a possible bug to report, historically (and this may be going back before your time, depending on your age), users submit that directly to support, not through the heavy filtering of a forum (which by it's very nature serves to insulate the people who need to recieve such reports from those who have those reports to make). So let's consider what a customer does to report a possible bug: They look for the support option in the navigation menu. This option offers several dead ends ("support services" suggests it is an option for this, but once you get there it isn't), so you end up selecting the "contact us" option < http://www.sophos.com/en-us/support/contact-support.aspx >. Nothing about not contacting about free products there. So then the next choice is primarily between a second "contact us" page < http://www.sophos.com/en-us/support/contact-support/contact-information.aspx > which provides direcdt email contact information, or "submit a query" < https://secure2.sophos.com/en-us/support/contact-support/support-query.aspx >. Either seem to be appropriate since they are both addressed to support. Yet again, nothing about not contacting about free products there. Sure, there is a field for "license or serial number" but that field is optional, which is consistant with the forms for most companies since they accept issue reports for both purchased and free products through the same foarm mechanism. So why should I suspect any difference here, particularly (as I say) since there is nothing to indicate submissions from free product users are not welcome here. But when support responds you find that out: "Can you please provide sophos license number for further investigating?"

    Now, what about those forums. Well, lets go back to that navigation menu. The single forum option is "sophostalk community". Once you get there, there is a reference (buried at the bottom of several paragraphs; funtionally equivalent to mouse print) a suggestion that "If you're a user of the brilliant, free Sophos Anti-Virus for Mac: Home Edition tool, try visiting the SophosFreeTalk online community." A suggestion, not a requirment.

    First off, burying something at the bottom of several paragraphs is a good way to hide it, not make it readily apparant and stress any importance to on it. Secondly, my experience is that such forums are strictly (or at least primarily) user to user and not an adequate means to bring an issue to the attention of the company since these forums are only moderated by company staff, and even then, typically not true support people but customer service people working for the support department. The company support forums are typically at least a place where there is some technical support people, thus providing at least some possibility that the issue  will be brought to the attention of those who need to at least have some influence in getting the issue looked at (although even those are secondary to a direct report of a possible bug).

    Secondly, there is again nothing to state that submissions from free product users are not welcome here. There is a suggestion to use other forums but nothing is stated specifically that questions from free users are not allowed here. In fact, there is a section SPECIFICALLY MARKED FOR QUESTIONS REGARDING FREE SOFTWARE. It's called "Sophos free tools". But post a message there and you'll find out quickly enough that you are not welcome there, despite being posted in a forum section SPECIFICALLY MARKED FOR QUESTIONS REGARDING FREE SOFTWARE.

    I think I have explained, based on Sophos own website and the responses of it's own people, how a user of Sophos free software could easily get the impression that they are being segregated from the "real" customer.

    Oh, and QC, your example of the camera sounds "good" but it's fabricated nonsense. Companies like Canon have seperate sections within their forums for specific models and groups of products (pro, non-pro) but they typically do not maintain seperate forums. Yes, if you post a message in the incorrect section, you will have your message moved but you won't be exiled to bum-f* where only 2nd class customers are allowed.

    :1008167
Reply
  • Spike/QC,

    I quess part of the problem stems from the lack of clarity on the part of Sophos. When someone has a possible bug to report, historically (and this may be going back before your time, depending on your age), users submit that directly to support, not through the heavy filtering of a forum (which by it's very nature serves to insulate the people who need to recieve such reports from those who have those reports to make). So let's consider what a customer does to report a possible bug: They look for the support option in the navigation menu. This option offers several dead ends ("support services" suggests it is an option for this, but once you get there it isn't), so you end up selecting the "contact us" option < http://www.sophos.com/en-us/support/contact-support.aspx >. Nothing about not contacting about free products there. So then the next choice is primarily between a second "contact us" page < http://www.sophos.com/en-us/support/contact-support/contact-information.aspx > which provides direcdt email contact information, or "submit a query" < https://secure2.sophos.com/en-us/support/contact-support/support-query.aspx >. Either seem to be appropriate since they are both addressed to support. Yet again, nothing about not contacting about free products there. Sure, there is a field for "license or serial number" but that field is optional, which is consistant with the forms for most companies since they accept issue reports for both purchased and free products through the same foarm mechanism. So why should I suspect any difference here, particularly (as I say) since there is nothing to indicate submissions from free product users are not welcome here. But when support responds you find that out: "Can you please provide sophos license number for further investigating?"

    Now, what about those forums. Well, lets go back to that navigation menu. The single forum option is "sophostalk community". Once you get there, there is a reference (buried at the bottom of several paragraphs; funtionally equivalent to mouse print) a suggestion that "If you're a user of the brilliant, free Sophos Anti-Virus for Mac: Home Edition tool, try visiting the SophosFreeTalk online community." A suggestion, not a requirment.

    First off, burying something at the bottom of several paragraphs is a good way to hide it, not make it readily apparant and stress any importance to on it. Secondly, my experience is that such forums are strictly (or at least primarily) user to user and not an adequate means to bring an issue to the attention of the company since these forums are only moderated by company staff, and even then, typically not true support people but customer service people working for the support department. The company support forums are typically at least a place where there is some technical support people, thus providing at least some possibility that the issue  will be brought to the attention of those who need to at least have some influence in getting the issue looked at (although even those are secondary to a direct report of a possible bug).

    Secondly, there is again nothing to state that submissions from free product users are not welcome here. There is a suggestion to use other forums but nothing is stated specifically that questions from free users are not allowed here. In fact, there is a section SPECIFICALLY MARKED FOR QUESTIONS REGARDING FREE SOFTWARE. It's called "Sophos free tools". But post a message there and you'll find out quickly enough that you are not welcome there, despite being posted in a forum section SPECIFICALLY MARKED FOR QUESTIONS REGARDING FREE SOFTWARE.

    I think I have explained, based on Sophos own website and the responses of it's own people, how a user of Sophos free software could easily get the impression that they are being segregated from the "real" customer.

    Oh, and QC, your example of the camera sounds "good" but it's fabricated nonsense. Companies like Canon have seperate sections within their forums for specific models and groups of products (pro, non-pro) but they typically do not maintain seperate forums. Yes, if you post a message in the incorrect section, you will have your message moved but you won't be exiled to bum-f* where only 2nd class customers are allowed.

    :1008167
Children
No Data