Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Real time on-access exclusions being ignored

I've been using Sophos AV on Mac for years, but I can't take it any more - it's a shame as it's an excellent product, but on all five of the macs used by my family, we have the same problem. Emails that arrive containing infected attachments always bring up an alert box, despite the ~/Library/Mail/V2/IMAP-me@redacted.com/[Gmail].mbox/Spam.mbox/ path being whitelisted in the preferences (note the trailing slash). As we use google apps for our mail, the spam folder receives a handful of malware every day, and having to deal with these alerts is unnecessarily distracting. It's functionality that has been broken now for over 2 years - snow leaopard, lion, mountain lion, mavericks, yosemite - all broken. Worse still, the actual quarantine window often doesn't even record a path for the files concerned, so it's laborious to track them down.
:1020143


This thread was automatically locked due to age.
Parents
  • Hi Steve,

    Thanks for the image. Is there any chance these items are being found by a scheduled scan rather than the on-access scanner? They have different configuration for the exclusions and cleanup actions.

    I definitely want to squish this bug. Next time you see this happening please open Activity Monitor, find "InterCheck" and grab a sample (there will be a Sample Process option in the contextual menu). Also find anything that says "SophosAVAgent" and do the same thing. You can send them to me direct.

    :1020186

    ---

    Bob Cook (bob.cook@sophos.com) Director, Software Development

Reply
  • Hi Steve,

    Thanks for the image. Is there any chance these items are being found by a scheduled scan rather than the on-access scanner? They have different configuration for the exclusions and cleanup actions.

    I definitely want to squish this bug. Next time you see this happening please open Activity Monitor, find "InterCheck" and grab a sample (there will be a Sample Process option in the contextual menu). Also find anything that says "SophosAVAgent" and do the same thing. You can send them to me direct.

    :1020186

    ---

    Bob Cook (bob.cook@sophos.com) Director, Software Development

Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?