How do you create a custom scan?

Question

After a first complete scan, 3 threats were quarantined, although the Sophos AV said 5 were detected - where are the other 2? The report said - "that the threat cannot be cleaned up. Please click the threat name above for manual cleanup instructions."

The manual cleanup instructions said -

11. If there are any threats for which the action available is "Clean up manually", create a custom scan.

12. Select the areas where the remaining threats reside and add these to the Scan items.

13. In the Options tab, select "Delete threat" from the drop down menu.

14. Click Done.

15. Run the scan.

First of all I cannot find a way to create a custom scan. There seems no way to drag and drop the threats into the custom scan window, or to move them there any other way. When I clicked the + button I expected to be able to select the threats and add them in, but all it did was create an empty file.

The software seems very unintuitive and un Apple like, very disorganised and illogical just like Windows. On the other hand, it may well be me that doesn't get it!!!! Having said that, it's good of Sophos to offer this program, and hopefully in time it will become more Apple like with a better UI.

Can you advise me, please? Thanks.

I am running Tiger 10.4.11

This thread was automatically locked due to age.

QC · Accepted Answer

Hello deanbar,

3 threats were quarantined, although the Sophos AV said 5 were detected - where are the other 2 
 Look at the Threat details which probably list more than one location/file for one or two of the threats (and no, it doesn't offer to deal with them individually). 
 disorganised and illogical just like Windows 
 :smileyhappy: that might explain that I don't find it overly complicated - I'm used to having almost no expectations. 
 First a few words about the Quarantine Manager: You can argue that it is Windows-like, un-Apple or whatever. Fact is, it's not a "place" where the items have been moved to (some scanners actually move items, you can do so with Sophos but it normally only used for collecting samples), it is more a list of information or, if you want, a communication hub. It collects information from the scanning engine and can in turn request certain actions from it. Right now on Mac it's only Cleanup. Cleanup is, for example, not available when the threat is found in an archive. 
 You don't have to run a custom scan each day and actually once you've found found out how to customize it it's rather simple (and anyway you can usually reuse it). 
 The + in the Scans window creates an empty scan and opens the configuration window (or you choose Edit for an existing scan). There you have two options: 
 
 Drag an item to the Scan items window 
 Use the + to select one from the finder window 
 
 You don't have to use the exact location, if you select a folder somewhere on the path the scan will take slightly longer but otherwise it makes no difference. Thus if the threat details show the path /Users/ItsMe/Desktop/Recipes/Bread&Spam/Delicious.html you click +, select Desktop and click Open . Or you just drag the /Recipes folder to the scan items window. If a scan has found something in your /.Trash your best bet is typing trash in the Search field.

HTH 
 Christian :1001071