Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 6 subscribers
  • Views 1873 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Manual Clean-Up- nothing works

gdb64

Like so many users I am beyond frustrated in trying to remove a virus identified during a scan and no matter how many custom scans I run and how many threads I read through i still cannot find the bloody thing and remove it. This is like trying to use 10 year old software, how can something in 2012 be so convoluted and manual-process heavy???

The virus is identified as being here: /Users/MYNAME/Library/Caches/Firefox/Profiles/47j68gs4.default/Cache/B/4E/63819d01

Why I cannot just click "delete/remove virus" and be done with it is beyond me; but venting aside now, can somebody PLEASE tell me how to remove it? Following the Custom Scan steps, as raised repeatedly on the forum, has so far accomplished nothing but having me go in circles. I have been trying to remove this for 9 hours now; come on Sophos, how is this good enough????

Thanks in advance for any assistance; I need to go take a walk now and cool off ...

:1006935


This thread was automatically locked due to age.
Parents
  • 0

    Since it's in your browser cache, the easiest way to remove it is to purge your cache.  The exploit itself is a JPEG exploit for Windows, and is likely firing due to a partial or corrupt download of a JPEG file that just happens to trigger the exploit condition.  If nothing else works, since you've got the path to the file, try temporarily disabling on-access scanning and throwing the file in the trash.  Then turn on-access scanning back on, remove the item listing from the quarantine manager (if it's still there), and continue.

    :1006951
Reply
  • 0

    Since it's in your browser cache, the easiest way to remove it is to purge your cache.  The exploit itself is a JPEG exploit for Windows, and is likely firing due to a partial or corrupt download of a JPEG file that just happens to trigger the exploit condition.  If nothing else works, since you've got the path to the file, try temporarily disabling on-access scanning and throwing the file in the trash.  Then turn on-access scanning back on, remove the item listing from the quarantine manager (if it's still there), and continue.

    :1006951
Children
No Data