Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 14 replies
  • Subscribers 6 subscribers
  • Views 3904 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Non believer

rjm1

On iMac running Lion (current version)

I am getting strange lists of files to be deleted from Quarantine Manager (V 8.0.4C)

Jun 11...

Threat: Mal/Phish-A

Path and Filename: /Library/Sophos Anti-Virus/com.sophos.sxl.plist,
    /Users/rjm/Library/Keychains/login.keychain,
    /Applications/MacFamilyTree.app/Contents/Resources/RippleShading.tiff
---
Did not clean up threat. Today Jun 13 got same threat  but file was an email attachment. More normal.
I am also getting the same thing on a MacBook Pro running Sophos Ver 7 and Ver 8
Filename: ,
   /Library/Keychains/System.keychain,
   /usr/lib/dyld
I do NOT want to delete these files...
Any idea what is going on???
:1007663


This thread was automatically locked due to age.
Parents
  • 0

    Funny you should mention that…

    All the legitimate files that Sophos identified were from one particular Gmail account.

    I just went on a hunt to find them… and when I found one of them in the Spam folder it had this box…

    Why is this message in Spam? It's similar to messages that were detected by our spam filters.

    I guess similar means that it did not think it should remove the virus.

    …and here comes the Catch-22

    Sophos finds it and deletes it. Since it is from an IMAP mail account that keeps it for 30 days, it will keep syncing… OK this is a different issue and not yours. I don't even want to think about why 1Password creates alias files to my Mail directory?

    I did however move a couple of these files (Application.htm) and Sophos found them and correctly identified their new locations and their original locations.

    This all leads back to my original reason for posting, why was Sophos pointing at "/usr/lib/dyld" ?


    :1007811
Reply
  • 0

    Funny you should mention that…

    All the legitimate files that Sophos identified were from one particular Gmail account.

    I just went on a hunt to find them… and when I found one of them in the Spam folder it had this box…

    Why is this message in Spam? It's similar to messages that were detected by our spam filters.

    I guess similar means that it did not think it should remove the virus.

    …and here comes the Catch-22

    Sophos finds it and deletes it. Since it is from an IMAP mail account that keeps it for 30 days, it will keep syncing… OK this is a different issue and not yours. I don't even want to think about why 1Password creates alias files to my Mail directory?

    I did however move a couple of these files (Application.htm) and Sophos found them and correctly identified their new locations and their original locations.

    This all leads back to my original reason for posting, why was Sophos pointing at "/usr/lib/dyld" ?


    :1007811
Children
No Data