Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 6 subscribers
  • Views 2721 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Troj/PHPObf-A is a backup item and cannot be modified

Laisha

Oh, help!

I have spent a couple of hours now, trying to remove 28 threats, all of them Troj/PHPObf-A.

I cannot manually remove any of them, because -- the message says -- "the operation can't be completed because backup items can't be modified."

Given that fact, are these threats rendered useless?


If not, what do I do now?

Is this a threat to my Mac, or am I just a carrier?

:1010300


This thread was automatically locked due to age.
  • 0

    From the threat name and error description, it appears that you've got some PHP files that are infected with malicious scripts -- such that if you hosted those PHP files, whoever landed on the page would become infected with the malware of the day.

    However, you appear to have these in a backup archive of some sort -- most likely Time Machine?

    Check the file path of the infected files.  If possible, I'd highly recommend manually deleting them from your backup.

    Check out "Time Machine Backup" at the bottom of http://www.sophos.com/en-us/support/knowledgebase/118117.aspx

    It's highly likely that all these detections are for backups of the same file in different time slices -- one "delete all backups" action in the Time Machine browser should clean all this up.

    :1010310