Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

First Scan Failed

  • Running 10.6.4
  • Removed Intego Antivirus last night, using their uninstaller successfully.
  • Installed Sophos
  • Noted BootCamp Drive issue, so set custom scan to exclude it
  • Ticked "include archives"
  • Besides system drive, I included two external FW drives in the custom scan
  • Began scan (SET TO REPORT ONLY), seemed to run fine.
  • Activity Monitor reported CPU% was occasionally in high 90s, then down to 25% area and back, repeatedly.
  • This did not slow down other computer activity, however.
  • 10 hours later, the scan appears to be stuck  with app. the 500,000 something file on the system drive (began with over a million)
  • Activity Monitor reports CPU for SophosAVAgent more or less pinned at 99-100% CPU
  • HOWEVER, the system is not slowed down, I ran Firefox, Activity monitor, switched Spaces:  nothing is frozen and nothing seems sluggish despite the Activity Monitor's reading.
  • Nothing in the Quarantine Manager
  • Log shows hourly updates have continued to run all night.  No threats, 3 issues.  Corrupted files plus I also found another issue in another sophos log window generated about a dmg file with "unrecognized file format" message (mentioned by another poster on this forum about a week ago.)
  • Force Quit does not show Sophos as unresponsive but I used it to quit anyway:  Sophos windows closed and Force Quit window no longer lists Sophos.
  • BUT Activity monitor still showed SophosAVAgent (root user) pinned at 99-100% CPU
  • SO, I selected SophosAVAgent and clicked on the stop sign "Quit Process" button of the Activity Manager, which worked.
  • Menu Bar shield icon for Sophos still there and functional
  • I ran sophos again on a single file, (the dmg file) and got the same report about unrecognized file format.
  • I will now uncheck the "scan archives" choice and I will attempt to run custom scan (again excluding the BootCamp partition) on the system drive and then each of the firewire drives, ONE AT A TIME and will report on how that goes later.

That is my initial report.

TIA

:1000623


This thread was automatically locked due to age.
Parents

  • mascotca wrote:

    … I guess at this point Sophos has trouble with:

    1. Archives …

    There's a known issue that affects scans of some type(s) of disk image, search the board and you should find a few mentions. If those results doesn't match the symptoms that you find when working with archives, continue posting in this topic. 

    HTH

    Graham

    :1000705
Reply

  • mascotca wrote:

    … I guess at this point Sophos has trouble with:

    1. Archives …

    There's a known issue that affects scans of some type(s) of disk image, search the board and you should find a few mentions. If those results doesn't match the symptoms that you find when working with archives, continue posting in this topic. 

    HTH

    Graham

    :1000705
Children
No Data