Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 14 replies
  • Subscribers 6 subscribers
  • Views 3893 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Non believer

rjm1

On iMac running Lion (current version)

I am getting strange lists of files to be deleted from Quarantine Manager (V 8.0.4C)

Jun 11...

Threat: Mal/Phish-A

Path and Filename: /Library/Sophos Anti-Virus/com.sophos.sxl.plist,
    /Users/rjm/Library/Keychains/login.keychain,
    /Applications/MacFamilyTree.app/Contents/Resources/RippleShading.tiff
---
Did not clean up threat. Today Jun 13 got same threat  but file was an email attachment. More normal.
I am also getting the same thing on a MacBook Pro running Sophos Ver 7 and Ver 8
Filename: ,
   /Library/Keychains/System.keychain,
   /usr/lib/dyld
I do NOT want to delete these files...
Any idea what is going on???
:1007663


This thread was automatically locked due to age.
Parents
  • 0

    These look like legitimate phish detections in your IMAP cache -- they'll likely show up linked to any app that uses your mail.app mail connections.

    Since it's all just links to the same cache, the easiest method of removing the files (even easier than using Sophos) is to just delete the actual emails via your email client (or web interface).  There's nothing in them that is malicious to your computer itself; they contain a link to malicious data or fake web pages stored on a malicious webserver.

    :1007799
Reply
  • 0

    These look like legitimate phish detections in your IMAP cache -- they'll likely show up linked to any app that uses your mail.app mail connections.

    Since it's all just links to the same cache, the easiest method of removing the files (even easier than using Sophos) is to just delete the actual emails via your email client (or web interface).  There's nothing in them that is malicious to your computer itself; they contain a link to malicious data or fake web pages stored on a malicious webserver.

    :1007799
Children
No Data