Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Can't Seem to Get Clean Up Threat to Work

I downloaded the software yesterday and installation went fine. I tried a few times to run Scan Local Drives to check for existing viruses, malware, etc. Each time it started the apparently quite lengthy process of examining over 6 million files and each time it ran about 20 minutes, then my system would lock up and I'd have to turn my MacBook Pro off and back on to restor operation. Each time the process got far enough where it detected a single file that I could see in the Quarentine Manger window but it said I have to clean that file up manually so I took no action at the time. A few hours later I went back and checked the Quarentine Manager and there are now 5 additional files there, all of which say that they can be cleaned up by the software. I've tried several times to run Clean Up Threat - for individual files alone and also for all 5 of the files it says it can fix simultaneously - and each time it runs for quite a long time and then simply ends. There are no messages displayed about having been successful, unsuccessful, etc. and when I go back and look at the Quarentine Manager, the same 6 files are still there. I'm having this much fun and the software hasn't even examined by entire drive yet (I don't think). What am I doing wrong? Should I remove this software and move on to something I might have to pay for that would actually help me?

:1009282


This thread was automatically locked due to age.
  • It sounds like you've got some large archives with many files in them stored on your computer.  When doing an on-demand scan, all archives are expanded and their contents are scanned... eating up large amounts of drive space temporarily.  You can see if this is your problem by temporarily disabling "scan inside archives and compressed files".  This will most likely resolve both your issues, but may also not cause any detections.

    In the quarantine manager, do you have file paths listed for the detections that have already been found?

    :1009298
  • Thanks for your reply, Andrew. To answer your last question, yes, Quarentine Manager does provide file paths for the detections it has already found (five that it says it can fix, one that it says must be cleaned up manually). I haven't had a chance to play with this for a day or two but I just initiated another clean-up of one of the detections that the software says it can fix so we'll see what happens.

    I did as you suggested and removed the check from the box that says Scan Inside Archives and Compressed Files, but when I initiated a scan of local drives, it still says it's going to analyze over 7.2 million files so that didn't appear to change anything. It seems to count fairly quickly but at the rate its counting it will take a long time to look at all the files. And I really don't want to limit the number of files it looks at because, as you said, that might speed up the process at the expense of leaving some bad stuff on my computer. 

    The system still says it's trying to clean-up that file but there's really no way for me to know if it's still working or just sti\uck in some kind of loop. I'll provide another update after the software has run for a while and we see what happens with this scan of local drives I just started.

    :1009368
  • Didn't accomplish much. When I left the house late yesterday I let the scan continue to run - it had counted down to abou 6.4 million files left to check - but when I got home several hours later it was no longer running, there were no error messages displaying and the Quarentine Manager - which had some items in it when I left - was empty. When I open up Scan Local Drives now it says the scan has never been completed and it indicates no threats detected. Very frustrating. Any suggestion on what else to try? If not, I think I'll remove the software and move on to something I might have to pay for but that is a bit more reliable.

    :1009390
  • The only other thing to try is disconnecting all external storage devices and disabling Live Protection.  If there's still a problem, we'll need to get the product team's attention, and send in an SDU package (generated using the SDU tool discussed and linked to here: http://www.sophos.com/en-us/support/knowledgebase/33556.aspx ).

    :1009400
  • Clean up takes forever ie 8 hours and you cant shut it off or shutdown your machine plus you dont know if the clean up is working - really frustrating

    :1009654
  • Clean up definitely shouldn't take that long... a standard cleanup takes 10 minutes, max (usually more like 30 seconds).

    What detection are you trying to clean?

    :1009656