Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 14 replies
  • Subscribers 6 subscribers
  • Views 3891 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Non believer

rjm1

On iMac running Lion (current version)

I am getting strange lists of files to be deleted from Quarantine Manager (V 8.0.4C)

Jun 11...

Threat: Mal/Phish-A

Path and Filename: /Library/Sophos Anti-Virus/com.sophos.sxl.plist,
    /Users/rjm/Library/Keychains/login.keychain,
    /Applications/MacFamilyTree.app/Contents/Resources/RippleShading.tiff
---
Did not clean up threat. Today Jun 13 got same threat  but file was an email attachment. More normal.
I am also getting the same thing on a MacBook Pro running Sophos Ver 7 and Ver 8
Filename: ,
   /Library/Keychains/System.keychain,
   /usr/lib/dyld
I do NOT want to delete these files...
Any idea what is going on???
:1007663


This thread was automatically locked due to age.
Parents
  • 0

    2012-06-22 20:23

    I have not touched the threats on the MacBook and when Sophos found the same threats on another pass. The number of "infected" files increased.

    Threat:Mal/EncPk-ACR

    Date:2012-06-21 4:38 PM and 2012-06-22 5:10 PM

    Path and Filename:

    /.Spotlight-V100/Store-V2/FE8F6CB9-1C20-44DA-98FC-0C2D86A22EFD/reverseStore.updates,

    /Library/Preferences/SystemConfiguration/com.apple.airport.preferences.plist,

    /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/Resources/English.lproj/NetworkInterface.strings,

    /Users/rjm/Library/Cookies/Cookies.binarycookies,

    /usr/lib/dyld

    Threat:Mal/Phish-A

    Date:2012-06-21 12:32 PM and 2012-06-22 5:26 PM

    Path and Filename:

    ,

    /Library/Preferences/com.sophos.sav.plist,

    /Library/Preferences/SystemConfiguration/com.apple.airport.preferences.plist,

    /private/var/log/DiagnosticMessages/2012.06.22.asl,

    /Users/elm/Library/PubSub/Feeds/67985d021933e1acca0a511092b9b134fd71a89e.xml

    Threat:Troj/BredoZp-S

    Date:2012-06-21 12:30 PM and 2012-06-22 5:24 PM

    Path and Filename:

    /Library/Preferences/SystemConfiguration/com.apple.smb.server.plist,

    /Library/Preferences/SystemConfiguration/preferences.plist,

    /private/var/log/asl/2012.06.22.U0.G80.asl,

    /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/Resources/English.lproj/NetworkInterface.strings,

    /Users/npm/Library/Preferences/com.apple.PubSubAgent.plist,

    /Library/Keychains/System.keychain

    Any ideas?

    :1007857
Reply
  • 0

    2012-06-22 20:23

    I have not touched the threats on the MacBook and when Sophos found the same threats on another pass. The number of "infected" files increased.

    Threat:Mal/EncPk-ACR

    Date:2012-06-21 4:38 PM and 2012-06-22 5:10 PM

    Path and Filename:

    /.Spotlight-V100/Store-V2/FE8F6CB9-1C20-44DA-98FC-0C2D86A22EFD/reverseStore.updates,

    /Library/Preferences/SystemConfiguration/com.apple.airport.preferences.plist,

    /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/Resources/English.lproj/NetworkInterface.strings,

    /Users/rjm/Library/Cookies/Cookies.binarycookies,

    /usr/lib/dyld

    Threat:Mal/Phish-A

    Date:2012-06-21 12:32 PM and 2012-06-22 5:26 PM

    Path and Filename:

    ,

    /Library/Preferences/com.sophos.sav.plist,

    /Library/Preferences/SystemConfiguration/com.apple.airport.preferences.plist,

    /private/var/log/DiagnosticMessages/2012.06.22.asl,

    /Users/elm/Library/PubSub/Feeds/67985d021933e1acca0a511092b9b134fd71a89e.xml

    Threat:Troj/BredoZp-S

    Date:2012-06-21 12:30 PM and 2012-06-22 5:24 PM

    Path and Filename:

    /Library/Preferences/SystemConfiguration/com.apple.smb.server.plist,

    /Library/Preferences/SystemConfiguration/preferences.plist,

    /private/var/log/asl/2012.06.22.U0.G80.asl,

    /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/Resources/English.lproj/NetworkInterface.strings,

    /Users/npm/Library/Preferences/com.apple.PubSubAgent.plist,

    /Library/Keychains/System.keychain

    Any ideas?

    :1007857
Children
No Data