Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 17 replies
  • Subscribers 6 subscribers
  • Views 48362 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Threat (Troj/Invo-Zip) comes back after manually deleting it from Time Machine backup. What now!?

Koamuseal

I've been having an issue with this detected threat:

threat.png

Every time I open the Quarantine Manager I see this threat in the list, but after a few seconds it disappears by itself before I have the chance to do anything about it.

I suspect the reason is that it has only been existing in my Time Machine backup, so I followed the steps from a thread in this forum about how to manually remove threats from TM backups.


In my case I have found out that the location for my threat seems to be in my mail 'Junk folder'. Through the Sophos Anti-Virus.log I found the pathway to where this threat is to be found:

(please note that I've replaced my e-mail account information with XXXXXXX)

V2/POP-XXXXXXX@XXXXXXXX.XX@mail.XXXXXXXX.XX/Junk.mbox/12A0ABC9-74E3-4CAB-ADBD-31C5B00D9360/Data/3/Attachments/3612/2/invoice.zip

I used Finder to locate the exact place for this threat, entered TM and removed it from all TM backups.


I then believed that the issue was solved, until the threat started to pop up again a couple of days later.

What do do now? I would really appreciate some help with this so I can get rid of this nasty thing once and for all.

:1014693


This thread was automatically locked due to age.
Parents
  • 0

    My understanding of the solution could have been a bit sharper but I can't fault the assistance you gave me. Once you showed me how to reveal hidden files it all became so much clearer. The old Mac systems were so much less complicated from a troubleshooting point of view but the sophistication and complexity of the newer operating sytems means that when things go wrong then, inevitably, putting them right again is a bit more involved. The real problem of course lies with the morons with nothing better to do with their time than try to sabotage people's sytems. If it was up to me I'd lock them up and throw away the key.

    Thanks once again,

    Fuzzy

    :1018595
Reply
  • 0

    My understanding of the solution could have been a bit sharper but I can't fault the assistance you gave me. Once you showed me how to reveal hidden files it all became so much clearer. The old Mac systems were so much less complicated from a troubleshooting point of view but the sophistication and complexity of the newer operating sytems means that when things go wrong then, inevitably, putting them right again is a bit more involved. The real problem of course lies with the morons with nothing better to do with their time than try to sabotage people's sytems. If it was up to me I'd lock them up and throw away the key.

    Thanks once again,

    Fuzzy

    :1018595
Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?