Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

New user several questions

First, for the automatic update interval, how is the time calculated? Is it ordinary chronological time, or is it actual computer running time. For example, if I select automatic updating for daily, with the last update having occurred at 9 AM Tuesday, will the next update happen at 9 AM Wednesday, provided the computer is not sleeping at that moment. Or will it need 24 hours of actual computer running time, which might not happen if the computer is sleeping for extended periods perhaps until several days later?

Second, I ran Sophos (9.0.8) yesterday booted from a 10.6.8 partition on an external drive. It calculated something like 1,900,000 files/folders to scan. The 10.6.8 boot volume was only around 701,000. The other volume on that drive, a 10.8.5, is around 607,000, which, if Sophos was scanning both, still comes nowhere near close to the total Sophos calculated. If I add in the internal 10.6.8 volume, the total is a figure around 2,001,000, still not the 1,900,000 I saw, but more plausible. Was it scanning all three volumes? I am very puzzled about the number of files Sophos calculated. Naturally, this scan took far longer than intended.

Finally, although I logged in to my admin user in order to run the scan, I am normally running out of a standard account for security. So, of course, there I could see that my admin user was out of bounds. But from the standard user, I ran a shell script which opened Sophos with root privileges (do shell script "/Applications/'Sophos Anti-Virus.app'/Contents/MacOS/'Sophos Anti-Virus' > /dev/null 2>&1 &" with administrator privileges) When I opened Sophos that way, I was able to see the other user, but I still got the notice that I was running using "current privileges." Not sure why that didn't disappear when opened as root, but what I wonder is, since that notice didn't disappear, if running as root will have the necessary privileges needed to scan all system files, and if anything is found, will I be able to "clean" that infection--should it really need to be cleaned? I would not like to have to log in to my admin account in order to do either of those, completely scan all system files, and clean, when necessary.


:1016041


This thread was automatically locked due to age.
Parents

  • brvx wrote:

    And would you happen to know if Sophos has catalogued all those? Curious to know if there is a full catalogue of Sophos (Home) for OSX somewhere.


    No idea if we already have detections for the samples but the chances are good. The "white hat" security community is usually pretty good about sharing information about emerging threats and new discoveries. The advantage of a company like Sophos is that we have full-time staff working around the world to develop and distribute identities for this kind os stuff as they appear in the wild. Visit our website, click the "Labs" tab at the top of the page.

    Re: your question about "full catalogue" - we don't really publish information as a single list (its a huge database). We do make information available on our website, and its searchable.

    :1016155
Reply

  • brvx wrote:

    And would you happen to know if Sophos has catalogued all those? Curious to know if there is a full catalogue of Sophos (Home) for OSX somewhere.


    No idea if we already have detections for the samples but the chances are good. The "white hat" security community is usually pretty good about sharing information about emerging threats and new discoveries. The advantage of a company like Sophos is that we have full-time staff working around the world to develop and distribute identities for this kind os stuff as they appear in the wild. Visit our website, click the "Labs" tab at the top of the page.

    Re: your question about "full catalogue" - we don't really publish information as a single list (its a huge database). We do make information available on our website, and its searchable.

    :1016155
Children
No Data