Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

New user several questions

First, for the automatic update interval, how is the time calculated? Is it ordinary chronological time, or is it actual computer running time. For example, if I select automatic updating for daily, with the last update having occurred at 9 AM Tuesday, will the next update happen at 9 AM Wednesday, provided the computer is not sleeping at that moment. Or will it need 24 hours of actual computer running time, which might not happen if the computer is sleeping for extended periods perhaps until several days later?

Second, I ran Sophos (9.0.8) yesterday booted from a 10.6.8 partition on an external drive. It calculated something like 1,900,000 files/folders to scan. The 10.6.8 boot volume was only around 701,000. The other volume on that drive, a 10.8.5, is around 607,000, which, if Sophos was scanning both, still comes nowhere near close to the total Sophos calculated. If I add in the internal 10.6.8 volume, the total is a figure around 2,001,000, still not the 1,900,000 I saw, but more plausible. Was it scanning all three volumes? I am very puzzled about the number of files Sophos calculated. Naturally, this scan took far longer than intended.

Finally, although I logged in to my admin user in order to run the scan, I am normally running out of a standard account for security. So, of course, there I could see that my admin user was out of bounds. But from the standard user, I ran a shell script which opened Sophos with root privileges (do shell script "/Applications/'Sophos Anti-Virus.app'/Contents/MacOS/'Sophos Anti-Virus' > /dev/null 2>&1 &" with administrator privileges) When I opened Sophos that way, I was able to see the other user, but I still got the notice that I was running using "current privileges." Not sure why that didn't disappear when opened as root, but what I wonder is, since that notice didn't disappear, if running as root will have the necessary privileges needed to scan all system files, and if anything is found, will I be able to "clean" that infection--should it really need to be cleaned? I would not like to have to log in to my admin account in order to do either of those, completely scan all system files, and clean, when necessary.


:1016041


This thread was automatically locked due to age.
Parents
  • With all due respect Bob, with that very brief reply, I don't think you've really addressed the substance of what I wrote in my latest post concerning the different modes of scanning and their related privileges. At least it isn't clear to me. Perhaps you were rushed for time; maybe you can review what I wrote again, and perhaps provide a more expansive answer directed more to the specifics of what I wrote.

    EDIT: I am particularly interested in knowing what "current privileges" means when Sophos is opened with admin privileges by way of the shell script. (Perhaps you can run Sophos from that script as an AppleScript to see exactly what I'm talking about?) Does the appearance of the Use current privileges button there mean that Sophos does not fully recognize the admin privileges in that mode?  And eariler you did seem to be saying that Sophos would be able to scan at a deeper level when opened as root, either by the shell script or by sudo. No?

    And do you have any comment about my observation that Sophos appears to be looking at and scanning all attached volumes (Firewire in this case.)

    Or should we do this by email? Thanks

    :1016063
Reply
  • With all due respect Bob, with that very brief reply, I don't think you've really addressed the substance of what I wrote in my latest post concerning the different modes of scanning and their related privileges. At least it isn't clear to me. Perhaps you were rushed for time; maybe you can review what I wrote again, and perhaps provide a more expansive answer directed more to the specifics of what I wrote.

    EDIT: I am particularly interested in knowing what "current privileges" means when Sophos is opened with admin privileges by way of the shell script. (Perhaps you can run Sophos from that script as an AppleScript to see exactly what I'm talking about?) Does the appearance of the Use current privileges button there mean that Sophos does not fully recognize the admin privileges in that mode?  And eariler you did seem to be saying that Sophos would be able to scan at a deeper level when opened as root, either by the shell script or by sudo. No?

    And do you have any comment about my observation that Sophos appears to be looking at and scanning all attached volumes (Firewire in this case.)

    Or should we do this by email? Thanks

    :1016063
Children
No Data