Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 14 replies
  • Subscribers 6 subscribers
  • Views 3893 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Non believer

rjm1

On iMac running Lion (current version)

I am getting strange lists of files to be deleted from Quarantine Manager (V 8.0.4C)

Jun 11...

Threat: Mal/Phish-A

Path and Filename: /Library/Sophos Anti-Virus/com.sophos.sxl.plist,
    /Users/rjm/Library/Keychains/login.keychain,
    /Applications/MacFamilyTree.app/Contents/Resources/RippleShading.tiff
---
Did not clean up threat. Today Jun 13 got same threat  but file was an email attachment. More normal.
I am also getting the same thing on a MacBook Pro running Sophos Ver 7 and Ver 8
Filename: ,
   /Library/Keychains/System.keychain,
   /usr/lib/dyld
I do NOT want to delete these files...
Any idea what is going on???
:1007663


This thread was automatically locked due to age.
Parents
  • 0

    OK.

    Here is a new wrinkle.

    On the iMac Sophos has now dreamed up some original locations for the files...

    Threat: Mal/Phish-A

    Date: 2012-06-18 3:34 PM and 2012-06-18 5:27 PM

    Path and Filename:

    /Users/rjm/Library/Mail/V2/IMAP-Morton.Robert@imap.gmail.com/[Gmail].mbox/Spam.mbox/C87B5462-3786-4D77-95C2-19203B87A72D/Data/5/8/2/Attachments/285161/2/Application.htm,

    /Users/rjm/Library/Mail/V2/IMAP-Morton.Robert@imap.gmail.com/[Gmail].mbox/Spam.mbox/C87B5462-3786-4D77-95C2-19203B87A72D/Data/6/8/2/Attachments/286906/2/Application.htm,

    /Users/rjm/Library/Mail/V2/IMAP-Morton.Robert@imap.gmail.com/[Gmail].mbox/Spam.mbox/C87B5462-3786-4D77-95C2-19203B87A72D/Data/8/7/2/Attachments/278642/2/Application.htm  

    Original Locations:

    /Library/Preferences/com.sophos.sav.plist,

    /private/var/db/launchd.db/com.apple.launchd/overrides.plist,

    /private/var/db/ntp.drift,

    /System/Library/Framworks/CoreServices.fra…work/Versions/A/Support/SFLSharedPrefsTool,

    /usr/lib/system/libremovefile.dylib,

    /usr/share/icu/icudt46l.dat

    :1007781
Reply
  • 0

    OK.

    Here is a new wrinkle.

    On the iMac Sophos has now dreamed up some original locations for the files...

    Threat: Mal/Phish-A

    Date: 2012-06-18 3:34 PM and 2012-06-18 5:27 PM

    Path and Filename:

    /Users/rjm/Library/Mail/V2/IMAP-Morton.Robert@imap.gmail.com/[Gmail].mbox/Spam.mbox/C87B5462-3786-4D77-95C2-19203B87A72D/Data/5/8/2/Attachments/285161/2/Application.htm,

    /Users/rjm/Library/Mail/V2/IMAP-Morton.Robert@imap.gmail.com/[Gmail].mbox/Spam.mbox/C87B5462-3786-4D77-95C2-19203B87A72D/Data/6/8/2/Attachments/286906/2/Application.htm,

    /Users/rjm/Library/Mail/V2/IMAP-Morton.Robert@imap.gmail.com/[Gmail].mbox/Spam.mbox/C87B5462-3786-4D77-95C2-19203B87A72D/Data/8/7/2/Attachments/278642/2/Application.htm  

    Original Locations:

    /Library/Preferences/com.sophos.sav.plist,

    /private/var/db/launchd.db/com.apple.launchd/overrides.plist,

    /private/var/db/ntp.drift,

    /System/Library/Framworks/CoreServices.fra…work/Versions/A/Support/SFLSharedPrefsTool,

    /usr/lib/system/libremovefile.dylib,

    /usr/share/icu/icudt46l.dat

    :1007781
Children
No Data