Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DELETING A THREAT MANUALLY - FINDING THE THREAT

Whenever I do a full scan, Sophos finds the same two threats which need to be manually removed.  The trouble is I can't find the location folder of these threats as whenever I search for the filename on my mac they just can't be found.

Does anyone know of a way I can find the path to where these threats are located so I can manually remove them?  

Thanks

Colette     :smileyvery-happy:

:1001219


This thread was automatically locked due to age.
Parents
  • Sophos is telling me that I have the trojan OSX/Flashplr-D on my computer (I gather that this one has hit an awful lot of Mac users in the past few days, so maybe someone out there has some specific knowledge).

    After scanning my home drive, the quarantine window tells me I need to clean up manually.

    I've followed the instructions to create a custom scan and set it to delete. Home drive now seems clean. However...

    Re-running a scan on all local drives (just to make sure it was all gone) it seems the trojan is still there on my backup drive. The quarantine window tells me that OSX/Flashplr-D is still there and gives me several locations on my Time Machine backup drive:

    /Volumes/FreeAgent GoFlex Drive/Backups.backupdb/<name>'s Computer (2)/2012-03-28-075956/Hard Disk/Users/<name>/.null

    Checking the custom scan log, it says at the end "Threat not deleted because cleanup is available"

    Not sure what this means. Can someone tell me, please?

    I have tried to browse to this location in Finder and Time Machine in order to delete the trojan manually, but can't find the path/file specified by quarantine (I gather a few of you have been this far).

    I'm now at a loss. How do I go further with manually removing this trojan from my backup drive? Any help will be much appreciated.

    Thanks.

    :1006121
Reply
  • Sophos is telling me that I have the trojan OSX/Flashplr-D on my computer (I gather that this one has hit an awful lot of Mac users in the past few days, so maybe someone out there has some specific knowledge).

    After scanning my home drive, the quarantine window tells me I need to clean up manually.

    I've followed the instructions to create a custom scan and set it to delete. Home drive now seems clean. However...

    Re-running a scan on all local drives (just to make sure it was all gone) it seems the trojan is still there on my backup drive. The quarantine window tells me that OSX/Flashplr-D is still there and gives me several locations on my Time Machine backup drive:

    /Volumes/FreeAgent GoFlex Drive/Backups.backupdb/<name>'s Computer (2)/2012-03-28-075956/Hard Disk/Users/<name>/.null

    Checking the custom scan log, it says at the end "Threat not deleted because cleanup is available"

    Not sure what this means. Can someone tell me, please?

    I have tried to browse to this location in Finder and Time Machine in order to delete the trojan manually, but can't find the path/file specified by quarantine (I gather a few of you have been this far).

    I'm now at a loss. How do I go further with manually removing this trojan from my backup drive? Any help will be much appreciated.

    Thanks.

    :1006121
Children
No Data