Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DELETING A THREAT MANUALLY - FINDING THE THREAT

Whenever I do a full scan, Sophos finds the same two threats which need to be manually removed.  The trouble is I can't find the location folder of these threats as whenever I search for the filename on my mac they just can't be found.

Does anyone know of a way I can find the path to where these threats are located so I can manually remove them?  

Thanks

Colette     :smileyvery-happy:

:1001219


This thread was automatically locked due to age.
Parents
  • Lect is a typo, now fixed.

    If you named the scan in the scan name field, then you already clicked the triangle to open the custom scan part of the window.

    I'll provide simplified instructions instead of step-by-step instructions:

    What was already discussed in this thread by you and others is that in order to delete the threat, you need to do a custom scan instead of a "scan local drives" scan.  This means you need to create a new custom scan which will show up in the Custom Scans pane.  You can name this whatever you want; it just has to be scanning the area where the file is located.  Since you know the file is on your external volume, when creating your custom scan, you need to follow steps 9 through 12 in my previous instructions.  If you skip this step and only create a custom scan, you will be scanning nothing, which will, of course, turn up 0 results.

    So now that you've got a custom scan created, follow steps 9 through 12.  The scan should again detect the malware just as the Local Drives scan did, but now you should have an option to clean up -- which just does a secure delete of the file (it doesn't get thrown in the trash).

    If you'd prefer to do it yourself manually, you need to check the scan log in the Console.app and copy the full path to the file, and either do Finder -> Go... -> Go To Folder... and paste it in (without the filename), then select the file and throw it in the trash, or use Terminal.app and run rm -r <path/and/filename> to delete it.  These methods involve increasing complexity and both accomplish the same thing as a custom scan and clean.

    :1001467
Reply
  • Lect is a typo, now fixed.

    If you named the scan in the scan name field, then you already clicked the triangle to open the custom scan part of the window.

    I'll provide simplified instructions instead of step-by-step instructions:

    What was already discussed in this thread by you and others is that in order to delete the threat, you need to do a custom scan instead of a "scan local drives" scan.  This means you need to create a new custom scan which will show up in the Custom Scans pane.  You can name this whatever you want; it just has to be scanning the area where the file is located.  Since you know the file is on your external volume, when creating your custom scan, you need to follow steps 9 through 12 in my previous instructions.  If you skip this step and only create a custom scan, you will be scanning nothing, which will, of course, turn up 0 results.

    So now that you've got a custom scan created, follow steps 9 through 12.  The scan should again detect the malware just as the Local Drives scan did, but now you should have an option to clean up -- which just does a secure delete of the file (it doesn't get thrown in the trash).

    If you'd prefer to do it yourself manually, you need to check the scan log in the Console.app and copy the full path to the file, and either do Finder -> Go... -> Go To Folder... and paste it in (without the filename), then select the file and throw it in the trash, or use Terminal.app and run rm -r <path/and/filename> to delete it.  These methods involve increasing complexity and both accomplish the same thing as a custom scan and clean.

    :1001467
Children
No Data