Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is malware secretly controlling my SAV settings??

I recently had the problem of my SAV not updating anymore (probably the generic one discussed here – but in addition, On-Access scanning was also disabled and I couldn't switch it on anymore). I resolved this by uninstalling and re-installing SAV. Now the updates essentially work, and so does On-Access scan, BUT:

Whenever I've just restarted my computer and logged in, and have a look at my SAV settings, I find that the settings are not protected anymore (it reads "click the lock to prevent changes"), even though I always, always, always protect my settings (such that it should read "click the lock to make changes"). (Also, once I noticed the Sophos logo in the toolbar suddenly going from black to grey, as if it were turned off, but as soon as I clicked on it, it was back to black and everything looked normal.)

Now I really worry, is there some malware meddling with my SAV?

:1018761


This thread was automatically locked due to age.
  • That does sounds quite strange.

    What version of Mac OS X and SAV for Mac are you running?  Can I suggest you manually upgrade to v9.1 if you are not already on that...

    http://openforum.sophos.com/t5/Sophos-Anti-Virus-for-Mac-Home/SAV-for-Mac-9-1-Preview/td-p/18025

    Padlock locking problems seem to occur on older OS versions, as explained here...

    http://theappledaily.com/2011/07/25/fix-click-the-lock-to-prevent-further-changes-not-working-after-lion-upgrade/

    ...so maybe if the OS is Lion etc. then that may explain it's a OS issue and may affect all System Preferences options and not just SAV.

    Are there any other users of the computer that have the the problem?  Are they admin accounts (if there are other users) or you could create a fresh account and test the behavior under a new user account (if you don't have any other accounts) - it may be a profile issue under your current log on.

    :1018789

     - - - - - - - - - - - -

    Communities Moderator, SOPHOS
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • I use Mavericks (10.9.4) and SAV 9.0.11 (it was 9.1.6 before I uninstalled and re-installed; I used to get updates through my university but now I get them directly from Sophos).

    I am the only user of my MacBook, so of course my account has admin rights. Now I created another account to try out its behavior, first as a "normal", non-admin user. The padlock in my SAV settings remained perfectly closed when I logged in with this new account; the same was the case when I stripped my good old main account of its admin status, while when I made the new account into an admin account, the padlock was open after login, just as with the main account when it has admin status. Furthermore, I observed that when I look at my SAV settings not immediately after login but only after a certain time, I also find the padlock closed, without having to manually lock it. Also, whenever SAV is getting updated, On-Access scanning seems to switch off for a short time, then switches on again.

    :1018975
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?