Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 6 subscribers
  • Views 6599 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Issues Detected after Threat Found and deleted

eichendoit

Quick question:

Here is some background:

I tried to download Firefox to access an application for school. I accidentally (through no fault except my own absent-mindedness) clicked on a third party "provider" of Firefox. When I clicked download, I couldnt find the installation icon on my desktop. Eventually an installer called "Installer" (clever, I know) appeared and I thought it a little strange that Firefox's installer would be unspecified, but since I was in a rush, I opened it up. It was incredibly slow to install. At around 33%, a window of Firefox was opened and I was a  little confused since the installation had yet to complete. Sophos informed me that a threat had been detected (OSX/Geonei-A, a virus Sophos has detected once before, which upon research I found only is a threat if properly installed). So I canceled the installation and went back to Firefox (I had yet to figure out the connection). I tried to clean up the OSX/Geonei-A, but Sophos said the clean up failed. I then realized the installation had not stopped and was at 77%. I tried to close it a few times without luck, but did eventually managed to abort the installation and eject the install software. I deleted the files attached to it. My computer was running a little slow and clunky. I quickly put some essential documents onto a flashdrive (just wanted to be safe in case something went terribly wrong). I restarted my computer and ran Sophos. After a while the scan went through all my files and no threats were detected—though under the "no threats detected" it does say Issues detected. Now this is something that happened in previous scans, but since they dont come up in the quaratine manager, I assume they arent worth worrying about. However, in the wake of this scare, I want to know for sure that I am out of the woods and am in the clear. 

Can anyone help to clarify what "Issues Detected" means and if there is anything I can do to double check that my computer is indeed clean and free from whatever virus I had downloaded?

I have provided a picture of the Issues detected, though I'm sure it is superflous. Let me know if anyone would like the link to the phony Firefox provider.

Thank you. 

:1018461


This thread was automatically locked due to age.
  • 0

    I went through this site and found this:

    http://openforum.sophos.com/t5/Sophos-Anti-Virus-for-Mac-Home/NO-THREATS-FOUND-ISSUE-DETECTED/m-p/13979#M6559

    So I apologize for posting something that has already been answered; however, if someone could just verify that I am in the clear, I would really appreciate it.

    :1018463
  • 0

    Yep, the issues detected should be OK.  You can check the log if you like to be sure...

    If it was me I'd ensure I'd scanned all part of the computer.  'Scan This Mac' can get re-configured over time and hence you may have a few exclusions and have altered the default settings.  Therefore maybe create a custom scan for the main drive (no Time Machine backups nor external drives) with compressed files set to be included in the scan.  Run that and see how it goes.  It gets the main HD, all files including compressed ones, and avoids grinding through Time Machine backups (where malware can be saved but can't actually hurt the computer).

    Then set up a second custom scan for Time Machine (if used) and scan that - SAV can't delete from inside the backup but it can detect and I'd want to know if a back had anything in it - it's not absolutely required, just belt and braces.  Then, once everything is coming back clean, maybe a scan of the thumb drive I backed up the files to.  Watch the video below for help on setting up customer scans and where the compressed files option is so you can select it before starting...

    :1018491

     - - - - - - - - - - - -

    Communities Moderator, SOPHOS
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?