Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

cleaned items

I have scanned my files and Sophos found viruses. I clicked on clean threats, and received a message that they might be deleted if the cleaning cannot be done. How do I know if the file was actually deleted or cleaned? Does the program have a record I can access to see what was actually done? I cannot see the file anymore, but it might still be there somewhere. 

:1004537


This thread was automatically locked due to age.
  • Hello brandtal,

    the actions performed are written to the log (Preferences -> Logging -> View Log)

    Christian

    :1004539
  • Also, for most malware on the Mac, the file will be deleted. 

    The difference is there for viruses that attach themselves to other applications and documents, which can often be removed without removing the original application/document. 

    As most of the things being detected are actual malicious files (trojans, FakeAV, website redirects/scripts, etc.), cleanup usually involves simply deleting the file.  Cleanup can also involve fixing other system files that can be affected by malware (such as the hosts file), wheras deletion just removes the file without attempting other cleanup methods.

    :1004547
  • I have setup a custom scan of a single file, and when I run a scan of it, nothing shows up in the log as QC described here.  Should something be showing up in the log, saying that the file has been scanned, and has no viruses, or just even saying that a custom scan has been run?  Thanks!

    :1009430
  • In the custom scan log, it should show what detection data has been loaded, what time the scan started, what time it finished, and that there were no viruses detected.

    There's more than one log file; custom scans should show up in Console.app under > ~/Library/Logs > Sophos Anti-Virus > Scans > [scan name] > [date stamp of scan]

    :1009432