Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Non believer

On iMac running Lion (current version)

I am getting strange lists of files to be deleted from Quarantine Manager (V 8.0.4C)

Jun 11...

Threat: Mal/Phish-A

Path and Filename: /Library/Sophos Anti-Virus/com.sophos.sxl.plist,
    /Users/rjm/Library/Keychains/login.keychain,
    /Applications/MacFamilyTree.app/Contents/Resources/RippleShading.tiff
---
Did not clean up threat. Today Jun 13 got same threat  but file was an email attachment. More normal.
I am also getting the same thing on a MacBook Pro running Sophos Ver 7 and Ver 8
Filename: ,
   /Library/Keychains/System.keychain,
   /usr/lib/dyld
I do NOT want to delete these files...
Any idea what is going on???
:1007663


This thread was automatically locked due to age.
Parents
  • Do NOT delete these files, as this is definitely not a legitimate detection; Mal/Phish-A should not fire on those sorts of files (should not even be referenced for those sorts of files).  In normal operation, Mal/Phish-A should only fire on email attachments or documents similar to email attachments (and some web pages).

    This sounds like a memory or disk corruption issue.  Does the problem go away after you reboot your computer?

    I'd definitely take this opportunity to run Disk Utility and repair file permissions and verify your drive as well.

    :1007677
Reply
  • Do NOT delete these files, as this is definitely not a legitimate detection; Mal/Phish-A should not fire on those sorts of files (should not even be referenced for those sorts of files).  In normal operation, Mal/Phish-A should only fire on email attachments or documents similar to email attachments (and some web pages).

    This sounds like a memory or disk corruption issue.  Does the problem go away after you reboot your computer?

    I'd definitely take this opportunity to run Disk Utility and repair file permissions and verify your drive as well.

    :1007677
Children
No Data