Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 14 replies
  • Subscribers 6 subscribers
  • Views 3904 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Non believer

rjm1

On iMac running Lion (current version)

I am getting strange lists of files to be deleted from Quarantine Manager (V 8.0.4C)

Jun 11...

Threat: Mal/Phish-A

Path and Filename: /Library/Sophos Anti-Virus/com.sophos.sxl.plist,
    /Users/rjm/Library/Keychains/login.keychain,
    /Applications/MacFamilyTree.app/Contents/Resources/RippleShading.tiff
---
Did not clean up threat. Today Jun 13 got same threat  but file was an email attachment. More normal.
I am also getting the same thing on a MacBook Pro running Sophos Ver 7 and Ver 8
Filename: ,
   /Library/Keychains/System.keychain,
   /usr/lib/dyld
I do NOT want to delete these files...
Any idea what is going on???
:1007663


This thread was automatically locked due to age.
Parents
  • 0

    Ah the joys of time delayed conversations...

    I too thought the system files listed might be some remnant of some kind. So…

    on the iMac I killed the Application.htm files manually and cleared any remaining "bogus" items from the quarantine manger list. Also, deleted the original files back at source (Gmail).

    on the MacBook Pro I did a complete new scan of the hard drive. Rebooted and Cleaned the two Application.htm files found in Mail… Now we wait for On-access Scanning to find a new threat.

    a day later… here is what I found on the MacBook Pro

    Threat: Mal/Phish-A

    Date: 2012-06-21 12:32 PM

    Path and Filename: 

    ,

    /Library/Preferences/com.sophos.sav.plist

    Threat: Troj/BredoZp-S

    Date: 2012-06-21 12:30 PM

    Path and Filename: 

    /Library/Preferences/SystemConfiguration/com.apple.smb.server.plist

    I have submitted these two files with Reference to 266729-3

    :1007833
Reply
  • 0

    Ah the joys of time delayed conversations...

    I too thought the system files listed might be some remnant of some kind. So…

    on the iMac I killed the Application.htm files manually and cleared any remaining "bogus" items from the quarantine manger list. Also, deleted the original files back at source (Gmail).

    on the MacBook Pro I did a complete new scan of the hard drive. Rebooted and Cleaned the two Application.htm files found in Mail… Now we wait for On-access Scanning to find a new threat.

    a day later… here is what I found on the MacBook Pro

    Threat: Mal/Phish-A

    Date: 2012-06-21 12:32 PM

    Path and Filename: 

    ,

    /Library/Preferences/com.sophos.sav.plist

    Threat: Troj/BredoZp-S

    Date: 2012-06-21 12:30 PM

    Path and Filename: 

    /Library/Preferences/SystemConfiguration/com.apple.smb.server.plist

    I have submitted these two files with Reference to 266729-3

    :1007833
Children
No Data