Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Help with Creating a Custom Scan to remove a Threat

I would appreciate help with a problem identified when I did a
scan using the free Sophos Anti-Virus for IMac Home Edition that
uses Mac OS X 10.5.  The scan detected Mal/EncPk-LF threat and
the action advised was to "clean up manually" by creating a
custom scan, but I cannot figure out how to do that.
Herbert Marx (hjmarxmd@pol.net)

:1001625


This thread was automatically locked due to age.
Parents
  • The safest way to clean them from within Time Machine is to navigate to the point where they are detected within Time Machine.  So, when viewing the full path, you look at the part beyond /Volumes/Time Machine Backup/Backups.backupdb/ to figure out where you should go.  The next part of the path should be the name of your hard drive that's backed up.

    Go into Time Machine, and havigate to the date indicated next in the file path, then the sub-path listed after that.  Eventually you'll come to the file (listed here as "... er.app".  Likely, this entire app is malicious.  My guess is that this is MacDefender.app?  If so, it will be found in the Applications folder.

    Right click on the file, and select the menu item that says something like "remove all occurances" -- this will delete EVERY backup of that file from your Time Machine volume.

    :1002971
Reply
  • The safest way to clean them from within Time Machine is to navigate to the point where they are detected within Time Machine.  So, when viewing the full path, you look at the part beyond /Volumes/Time Machine Backup/Backups.backupdb/ to figure out where you should go.  The next part of the path should be the name of your hard drive that's backed up.

    Go into Time Machine, and havigate to the date indicated next in the file path, then the sub-path listed after that.  Eventually you'll come to the file (listed here as "... er.app".  Likely, this entire app is malicious.  My guess is that this is MacDefender.app?  If so, it will be found in the Applications folder.

    Right click on the file, and select the menu item that says something like "remove all occurances" -- this will delete EVERY backup of that file from your Time Machine volume.

    :1002971
Children
No Data