Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sopho Anti-Virus for Mac stops and crashes during scan when it updates in OSX 10.8

I had the other problems with Sophos Anti-Virus for Mac when I upgraded to 10.8, but those were fixed with the update on Aug. 10, 2012. However, Sophos can not complete a scan if update comes up during the scan. The program crashes during that update.  I have scanned successfully for both local scan and custom scan of my MacBook Pro drive if I turn off the wi-fi to the computer. I don't have to turn the wi-fi off itself, but just to the computer.  Now, sometimes it will update several times during a scan before an update causes the program to crash, but usually it is the first scan. Is Sophos looking into this?  I believe I saw this problem with updates mentioned in some thread, but I can not find it now.  I am using version 8.06C.  I did not have this problem before updating to 10.8, so I am sure this problem is due to an incompatibility of Sophos with Mountain Lion.  Without a fix, I can still set up a scan in the middle of the night, but I have to turn the wi-fi off to my computer before retiring for the night. Thanks for any help.

:1009476


This thread was automatically locked due to age.
Parents
  • Andrew, I did as you suggested. I updated first, turned off the autoupdate, left the wi-fi on and ran a manual custom scan. The custom scan mode just scans my entire hard disk on my MacBookPro.  The scan excludes my two external network drives hooked up thru a timecapsule to the network. From observation, I don't think Sophos checks external drives only hooked up thru the network anyway, does it?  The scan I ran actually finished with no problems. The MacBookPro Scan.log simply said:

    Scan name: "MacBookPro"
    Scan items:
    Path: / enabled: yes
    Exclusions:
    Path: "/Volumes/Data/"
    Path: "/Volumes/FW1000HD/"
    Path: "/Volumes/Tunes 1000/"
    Configuration:
    Scan inside archives and compressed files: Yes
    Automatically clean up threats: No
    Action on infected files: Report only
    Live Protection enabled: Yes

    Immediate scan started at 2012-08-21 18:54:24 -0600

         2012-08-21 23:15:32 -0600 Issue: engine encountered an unrecognised file format at: /Users/garykolson/Downloads/StuffItDeluxe2011Trial.dmg

             Scan completed at 2012-08-21 23:57:50 -0600.

            1394466 items scanned, 0 threats detected, 1 issues

    The Sophos Anti-Virus.log said:

         com.sophos.intercheck: Corrupt file: /private/tmp/5d37d8a0.$$$

    I forgot to uncheck schedule, so custom scan ran again successfully at 3 am with similar message but a different "corrupt" /private/tmp file.

    I wonder if 10.8 uses a slightly different tmp file now that Sophos is flagging as corrupt?

    It would appear that something about the autoupdate is causing the Sophos program to crash when a scan is running.  Hope this helps.

    :1009514
Reply
  • Andrew, I did as you suggested. I updated first, turned off the autoupdate, left the wi-fi on and ran a manual custom scan. The custom scan mode just scans my entire hard disk on my MacBookPro.  The scan excludes my two external network drives hooked up thru a timecapsule to the network. From observation, I don't think Sophos checks external drives only hooked up thru the network anyway, does it?  The scan I ran actually finished with no problems. The MacBookPro Scan.log simply said:

    Scan name: "MacBookPro"
    Scan items:
    Path: / enabled: yes
    Exclusions:
    Path: "/Volumes/Data/"
    Path: "/Volumes/FW1000HD/"
    Path: "/Volumes/Tunes 1000/"
    Configuration:
    Scan inside archives and compressed files: Yes
    Automatically clean up threats: No
    Action on infected files: Report only
    Live Protection enabled: Yes

    Immediate scan started at 2012-08-21 18:54:24 -0600

         2012-08-21 23:15:32 -0600 Issue: engine encountered an unrecognised file format at: /Users/garykolson/Downloads/StuffItDeluxe2011Trial.dmg

             Scan completed at 2012-08-21 23:57:50 -0600.

            1394466 items scanned, 0 threats detected, 1 issues

    The Sophos Anti-Virus.log said:

         com.sophos.intercheck: Corrupt file: /private/tmp/5d37d8a0.$$$

    I forgot to uncheck schedule, so custom scan ran again successfully at 3 am with similar message but a different "corrupt" /private/tmp file.

    I wonder if 10.8 uses a slightly different tmp file now that Sophos is flagging as corrupt?

    It would appear that something about the autoupdate is causing the Sophos program to crash when a scan is running.  Hope this helps.

    :1009514
Children
No Data