Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 6 subscribers
  • Views 32339 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos detects Evernote as a trojan

nileshkc

Sophos detects evernote as a trojan and crashes evernote when it tries to synch on mac osx mountain lion. Please fix because I cant use evernote

:1011642


This thread was automatically locked due to age.
Parents
  • 0

    I don't know anything about Evernote, hence: Can you have a file that was personally uploaded to, or sent to your Evernote account that is malware?  Maybe that is triggering the detection - it's syncing a file that you have saved 'in the cloud' that is malware.

    Otherwise I'd say the way Evernote is opening non-malicious files is causing SAV to detect and it could be a false positive - SophosLabs would need a sample of the file detected.  I'd suggest something like setting the on-access scanner to move a threat, and then recreate the error.  With the detected file in the default 'infected' folder you can submit it as a sample.

    Submitting samples of suspicious files to Sophos

    http://www.sophos.com/en-us/support/knowledgebase/11490.aspx

    :1015837

     - - - - - - - - - - - -

    Communities Moderator, SOPHOS
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

Reply
  • 0

    I don't know anything about Evernote, hence: Can you have a file that was personally uploaded to, or sent to your Evernote account that is malware?  Maybe that is triggering the detection - it's syncing a file that you have saved 'in the cloud' that is malware.

    Otherwise I'd say the way Evernote is opening non-malicious files is causing SAV to detect and it could be a false positive - SophosLabs would need a sample of the file detected.  I'd suggest something like setting the on-access scanner to move a threat, and then recreate the error.  With the detected file in the default 'infected' folder you can submit it as a sample.

    Submitting samples of suspicious files to Sophos

    http://www.sophos.com/en-us/support/knowledgebase/11490.aspx

    :1015837

     - - - - - - - - - - - -

    Communities Moderator, SOPHOS
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?