Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 6 subscribers
  • Views 1050 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

OSX Trojan WPAKILL-A

Willc

I have OSx Lion installed and my Sophos antivirus is up to date. Sophos keeps detecting a trojan and after I open the quarantine manager and authenticate the Trojan entry disappers. The example above has happened more than 10 times in a row. Since this has initially happened I haven't installed any applications. It doesn't seem that the quarantine manager is able to quarantine the trojan . I will can not attach the error message. Any thoughts on remedy?

text from error:

Threat detected by Sophos Anit-Virus

'Virus/Spyware'Troj/WPAKill-A has been detected and

listed in Quarantine Manager.

Open Quarantine Manager  Close

:1004475


This thread was automatically locked due to age.
  • 0
    Sophos what's up! Any thoughts? Gram Cluley help me out!
    :1004497
  • 0

    There are a few other threads on here discussing similar issues... the problem is likely that the detection is in temporary cache files being loaded from a website... every time the code gets cached locally, the detection shows up.  Every time the cache gets cleared, it vanishes again.

    Are you finding the detection via an on-access scan or an on-demand scan?

    Also, Troj/WPAKill-A isn't an OS X trojan; it's a Windows Trojan... it presents itself as a way to bypass Microsoft's WPA (Windows Product Activation) technology to enable people to run Windows 7 with blacklisted serial numbers.

    As a result, it won't run on your Mac, and is likely in your web cache, not attached to an email or stored on your computer.

    To repeat: the culprit is likely a browser tab.

    :1004503