Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 26 replies
  • Subscribers 6 subscribers
  • Views 37977 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is a Trojan stopping Sophos running full scan?

mambaman

Hi guys

I recently was presented with a whole bunch of Trojans that had been sent to my Google Mail account in iMail. Apple had quarantines some of them to the Spam folder though not all but Sophos identified all of the Trojans and I clicked 'clean up. The issue kept appearing however and I am not sure whether this is because the Trojan is self-replicating or because there were a lot of them

I decided to run a full scan but something keeps holding that up: checking my log there are several messages of this type:

  • com.sophos.intercheck: Issue: Could not scan /private/tmp/68f01de2.$$$
    com.sophos.intercheck: An unexpected error occurred

    And similar. This seems to be what is stopping the scan

    Can anyone advise

I am wondering whether it is linked to the Torjans themselves all of which appear to be of this type:

  • com.sophos.intercheck: 2012-01-03 14:30:58 +0000 Threat: 'Troj/JSRedir-EK' detected in /Users/benamponsah68/Library/Mail/V2/Mailboxes/Junk (Gmail).mbox/C49321ED-C846-415A-BC11-115D7CA05705/Data/1/3/1/Attachments/131557/2/kizjfxyvpun.html

Any help appreciated as I am stumped

com.sophos.intercheck: Access to the file denied

:1004921


This thread was automatically locked due to age.
Parents
  • 0

    ah yes... you may have more luck with replacing all instances of %20 with spaces.  I'll try quoting a copy/pastable string in here.

    The reason for that is that Apple, in their infinite wisdom, made the Library folder invisible in the Finder starting with OS X 10.7.  It's still there, it just doesn't show up by default in Finder navigation.  One second and I'll get you the path you need....

    :1005021
Reply
  • 0

    ah yes... you may have more luck with replacing all instances of %20 with spaces.  I'll try quoting a copy/pastable string in here.

    The reason for that is that Apple, in their infinite wisdom, made the Library folder invisible in the Finder starting with OS X 10.7.  It's still there, it just doesn't show up by default in Finder navigation.  One second and I'll get you the path you need....

    :1005021
Children
No Data
Cookie Information Banner