Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 6 subscribers
  • Views 1771 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Tored 1.0a Missed by Sophos but spotted by MacScan

Macfan

MacSan reports that I have the Tored 1.0a trojan in one of my .jpg files but when that file is scanned by Sophos it says their is not infection.  Don't know which program to believe but worried that I am infected.  Any reason why two virus programs have different answers? 

:1004565


This thread was automatically locked due to age.
Parents
  • 0

    The detections will be different for different products, as the algorithms are different.

    In this case, either we're missing the sample, or MacScan is triggering a false-positive.

    Would you please send it to me via https://secure.sophos.com/support/samples ?

    Under company name, put "Requested by Andrew @ SophosLabs" - hopefully that will avoid it being filtered out.

    OSX/Tored is a RealBasic app, so if MacScan is detecting it in a true JPEG file (not a .app pretending to be a .jpg via a double extension), it's likely a MacScan FP.

    :1004569
Reply
  • 0

    The detections will be different for different products, as the algorithms are different.

    In this case, either we're missing the sample, or MacScan is triggering a false-positive.

    Would you please send it to me via https://secure.sophos.com/support/samples ?

    Under company name, put "Requested by Andrew @ SophosLabs" - hopefully that will avoid it being filtered out.

    OSX/Tored is a RealBasic app, so if MacScan is detecting it in a true JPEG file (not a .app pretending to be a .jpg via a double extension), it's likely a MacScan FP.

    :1004569
Children
No Data