Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Help with Creating a Custom Scan to remove a Threat

I would appreciate help with a problem identified when I did a
scan using the free Sophos Anti-Virus for IMac Home Edition that
uses Mac OS X 10.5.  The scan detected Mal/EncPk-LF threat and
the action advised was to "clean up manually" by creating a
custom scan, but I cannot figure out how to do that.
Herbert Marx (hjmarxmd@pol.net)

:1001625


This thread was automatically locked due to age.
Parents
  • Hi prtex,

    It appears you have a few things going on.

    First, delivery failed messages are often sent when a spammer forges your email address as the From: address in their spam.  It is likely that you are on a botnet's spamming list, so you are both getting hit with the spam and being abused as a fake sender.

    Second, we'll need to know more about what malware is being flagged and where quarantine is finding it... but I suspect that it is indeed Windows malware that is showing up in your mail cache -- if you use webmail, it'll be showing up in your web cache when you load your inbox.  It could also be drive-by java downloads that are in your Java cache folder.

    The truth is, the majority of malware that will make its way onto your Mac is actually Windows malware and will not execute on your Mac.  It is however still dangerous to any Windows machine you may communicate with, so it is best to clean it up.

    :1002955
Reply
  • Hi prtex,

    It appears you have a few things going on.

    First, delivery failed messages are often sent when a spammer forges your email address as the From: address in their spam.  It is likely that you are on a botnet's spamming list, so you are both getting hit with the spam and being abused as a fake sender.

    Second, we'll need to know more about what malware is being flagged and where quarantine is finding it... but I suspect that it is indeed Windows malware that is showing up in your mail cache -- if you use webmail, it'll be showing up in your web cache when you load your inbox.  It could also be drive-by java downloads that are in your Java cache folder.

    The truth is, the majority of malware that will make its way onto your Mac is actually Windows malware and will not execute on your Mac.  It is however still dangerous to any Windows machine you may communicate with, so it is best to clean it up.

    :1002955
Children
No Data