Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 6 subscribers
  • Views 4056 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Automatically Deleted Malware?

arricalee

Recently, Sophos detected a few Mal-A Phishing(I can't remember the exact name) viruses. I unlocked by entering my account's password to get rid of the viruses. Right after I have entered my password, the entry disappeared. I could no longer trace and delete it manually. So, I was wondering...is it possible that Sophos automatically deleted the phishing virus after I authenticated as the administrator?

Thank you so much for your help and guidance.

:1002883


This thread was automatically locked due to age.
Parents
  • 0

    If it's in the temp folder, that means it is a temporary file created by some other program, likely a mail program -- are you using IMAP via Mail.app?

    The reason it keeps vanishing and coming back is that the program loading the file is just caching it temporarily.

    If you want to dig under the hood, you could try opening terminal.app and typing lsof when the file exists -- this command will list all open files, and tell you what application has the file open.  This will give you a clue as to where to look to find the root of the issue.

    :1002925
Reply
  • 0

    If it's in the temp folder, that means it is a temporary file created by some other program, likely a mail program -- are you using IMAP via Mail.app?

    The reason it keeps vanishing and coming back is that the program loading the file is just caching it temporarily.

    If you want to dig under the hood, you could try opening terminal.app and typing lsof when the file exists -- this command will list all open files, and tell you what application has the file open.  This will give you a clue as to where to look to find the root of the issue.

    :1002925
Children
No Data