Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 14 replies
  • Subscribers 6 subscribers
  • Views 3893 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Non believer

rjm1

On iMac running Lion (current version)

I am getting strange lists of files to be deleted from Quarantine Manager (V 8.0.4C)

Jun 11...

Threat: Mal/Phish-A

Path and Filename: /Library/Sophos Anti-Virus/com.sophos.sxl.plist,
    /Users/rjm/Library/Keychains/login.keychain,
    /Applications/MacFamilyTree.app/Contents/Resources/RippleShading.tiff
---
Did not clean up threat. Today Jun 13 got same threat  but file was an email attachment. More normal.
I am also getting the same thing on a MacBook Pro running Sophos Ver 7 and Ver 8
Filename: ,
   /Library/Keychains/System.keychain,
   /usr/lib/dyld
I do NOT want to delete these files...
Any idea what is going on???
:1007663


This thread was automatically locked due to age.
Parents
  • 0

    Good Morning Andrew.

    The scan ran until 3:04 AM

    Sophos reported one threat in three separate spam mail attachments. The same ones I did not clean up last night.

    Threat: Mal/Phish-A

    Date:  2012-06-20 3:04 AM

    Path and Filename: 

    /Users/rjm/Library/Containers/com.agilebits.onepassword-osx/Data/Library/Mail/V2/IMAP-Morton.Robert@imap.gmail.com/[Gmail].mbox/Spam.mbox/C87B5462-3786-4D77-95C2-19203B87A72D/Data/5/8/2/Attachments/285161/2/Application.htm,

    /Users/rjm/Library/Containers/com.agilebits.onepassword-osx/Data/Library/Mail/V2/IMAP-Morton.Robert@imap.gmail.com/[Gmail].mbox/Spam.mbox/C87B5462-3786-4D77-95C2-19203B87A72D/Data/6/8/2/Attachments/286906/2/Application.htm,

    /Users/rjm/Library/Containers/com.agilebits.onepassword-osx/Data/Library/Mail/V2/IMAP-Morton.Robert@imap.gmail.com/[Gmail].mbox/Spam.mbox/C87B5462-3786-4D77-95C2-19203B87A72D/Data/8/7/2/Attachments/278642/2/Application.htm

    The only odd bit is that it found them via an alias of the "/HD/Users/rjm/Library/Mail" directory found in another application's directory tree???

    I suspect that these files do indeed contain viruses. Should I still ship them to you?

    I would normally restart the system, fire up mail and wait for "On-access Scanning" to find another threat... 

    but I think I will wait for your reply in case you want me to do something more esoteric...

    :1007797
Reply
  • 0

    Good Morning Andrew.

    The scan ran until 3:04 AM

    Sophos reported one threat in three separate spam mail attachments. The same ones I did not clean up last night.

    Threat: Mal/Phish-A

    Date:  2012-06-20 3:04 AM

    Path and Filename: 

    /Users/rjm/Library/Containers/com.agilebits.onepassword-osx/Data/Library/Mail/V2/IMAP-Morton.Robert@imap.gmail.com/[Gmail].mbox/Spam.mbox/C87B5462-3786-4D77-95C2-19203B87A72D/Data/5/8/2/Attachments/285161/2/Application.htm,

    /Users/rjm/Library/Containers/com.agilebits.onepassword-osx/Data/Library/Mail/V2/IMAP-Morton.Robert@imap.gmail.com/[Gmail].mbox/Spam.mbox/C87B5462-3786-4D77-95C2-19203B87A72D/Data/6/8/2/Attachments/286906/2/Application.htm,

    /Users/rjm/Library/Containers/com.agilebits.onepassword-osx/Data/Library/Mail/V2/IMAP-Morton.Robert@imap.gmail.com/[Gmail].mbox/Spam.mbox/C87B5462-3786-4D77-95C2-19203B87A72D/Data/8/7/2/Attachments/278642/2/Application.htm

    The only odd bit is that it found them via an alias of the "/HD/Users/rjm/Library/Mail" directory found in another application's directory tree???

    I suspect that these files do indeed contain viruses. Should I still ship them to you?

    I would normally restart the system, fire up mail and wait for "On-access Scanning" to find another threat... 

    but I think I will wait for your reply in case you want me to do something more esoteric...

    :1007797
Children
No Data