Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 1 reply
  • Subscribers 6 subscribers
  • Views 546 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Troj/Agent VII

lucicrisp

Hi,

I installed the MAC Sophos free anti virus software a while ago and recently I have had a rash of virus alerts, most of which have been dealt with by the software itself. However, this morning I had an alert for 'Troj/Agent VII' in a file called photos.zip, the filepath for which is in my TimeMachine backups drive. Sophos cannot clean this virus so I looked it up and the Sophois Knowledgebase says it only affects Windows. So - what to do please?? Should I delete the file and see if the warning comes up again, or is there a better course of action?

Many thanks in advance.

:1006825


This thread was automatically locked due to age.
Parents
  • 0

    Hello Luci,

    this is likely some attachment you've received by (SPAM) mail which is no longer on disk but has been backed up by TM. One option is to locate it using the Time machine browser and manually delete it from there.

    Or you might simply ignore it as it a) being Windows specific probably poses no threat, b) resides only in a backup and would have to be restored before being used, c) would be intercepted by on-access when you'd try to open it. Just for completeness, there's a very remote chance to pass it on if you'd restore the archive (or the message containing it) and forward it without opening it (as on-access usually isn't set to scan inside archives) - but I'd say it's very unlikely you'd do this.

    Christian

    :1006831
Reply
  • 0

    Hello Luci,

    this is likely some attachment you've received by (SPAM) mail which is no longer on disk but has been backed up by TM. One option is to locate it using the Time machine browser and manually delete it from there.

    Or you might simply ignore it as it a) being Windows specific probably poses no threat, b) resides only in a backup and would have to be restored before being used, c) would be intercepted by on-access when you'd try to open it. Just for completeness, there's a very remote chance to pass it on if you'd restore the archive (or the message containing it) and forward it without opening it (as on-access usually isn't set to scan inside archives) - but I'd say it's very unlikely you'd do this.

    Christian

    :1006831
Children
No Data