Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 6 subscribers
  • Views 5992 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos has been running for 4 days

ceecee

Sophos notified me there was a Mal/Phish-A threat that could be cleaned up. I clicked on "clean up threat." When this happened one other time the threat was cleaned up--over and done with. I'm using 10.5.8 not that that should make any difference. I can't shut down my computer with Sophos running. I can't delete the Sophos application with it running. This has been going on now for 4 days! How do I stop it?

:1010150


This thread was automatically locked due to age.
  • 0

    Since Mal/Phish-A pertains to emails, I'd recommend you force-quit Sophos Anti-Virus, disable on-access scanning, and then delete the infected email file (if it still exists -- the problem is likely that the file no longer exists and so the Quarantine Manager is having problems cleaning it up).  Then re-enable on-access scanning and you should be good to go.

    :1010264
  • 0

    No, Andrew, your recommended fix does not work. 

    In my case, "Cleaning up threats" ran for 11 hours and 6 minutes..., from 10 pm on 3/4/2013 to when I took a Screen Shot 2013-03-04 at 9.06.47 AM.

    Specifically, after the "Cleaning up threats" process ran for over 11 hours, I

    1) force-quit Sophos Anti-Virus (Version 8.0.11C);

    2) re-started computer (iMac running OS X 10.8.2);

    3) disabled on-access scanning;

    4) noted exclamation mark alert next to Quarantine Manager; 

    5) opened Quarantine Manager;

    6) observed (at 03-04-2013 12:15 PM) the same threat (W32/Gamarue-AL) which was there before (March 3, 2013 10:00 PM);

    7) clicked the lock to authenticate as administrator so I could see Path and Filename and "view all components of the threat";

    8) authenticated as administrator; ("Path and Filename" line immediately goes blank)

    9) clicked "Clean Up Threat" button in bottom right;

    10) received warning that "Cleanup may delete files that are identified as threat components and listed under Threat Details"'

    11) clicked "Clean Up" button;

    12) received striped progress bar and message "Cleaning up threats...".

    There you have it in 12 easy steps.

    The recommended solution does not work.

    "Cleaning up threats..." will not stop running.

    In addition, your recommended solution to the previous post is nonsensical.  You say the Mal/Phish-A pertains to emails and instruct the user to force-quit Sophos AV, then disable on-access scanning, and delete the infected email.  But it (the email) might not still exist, you say, and that THIS is likely the problem.  So the user is to 1) disable on-access scanning; 2) delete something which may no longer exist (which might prove to be difficult); and 3) re-enable on-access scanning.  Then he should be "good to go." 

    Andrew (and Sophos for Mac "User Experience Committee," aka somebody with authority at Sophos), please give Mac users with this problem a real solution.  There are numerous posts of the same issue on this forum, but thus far, there is no authoritative, functioning answer or solution that has been provided.

    Sophos, please provide a coherent response and a functional, effective solution.

    :1011636
  • 0

    Just did latest update for Sophos Removal Tooll and it ran for over 6 hours - I had to exit the program -

    I truly don't think it should run that long - what is wrong - hope someone can help me - also have not been able to post new message - and am logged on/in

    Thanks

    :1012882