Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 13 replies
  • Subscribers 6 subscribers
  • Views 3198 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How can I remove Troj/Iframe-HJ?

jk10003

I installed Sophos Anti-Virus 8.0.6C for Mac today.  It almost immediately found Troj/Iframe-HJ.  However, when I go to the Quarantine Manager, put in my admin password, and press Clean Up Threat, it says "Cleaning up threats..." but the task never finishes.  Is there another way, or another version, I should be using?  And can anyone tell me anything else about this threat?The Sophos website, http://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/Troj~Iframe-HJ/detailed-analysis.aspx  is kind of obscure.

Thanks.

JK

:1008452


This thread was automatically locked due to age.
Parents
  • 0

    Hello JK,

    Iframe labels malicious "web content"  (HTML,Scripts,...) - not necessarily from a web page, it can also arrive e.g. in an email. If you close and reopen the Quarantine Manager - is the item still there with the status Cleaning up? Where has it been found? Andrew/Agile for sure knows much more about threats and cleanup so I suggest you wait for him to comment on it. Meanwhile don't worry - if the initial scan found it it's likely from the past and will no longer be accessed by an application which could "activate" it. And even if you deliberately attempt to open it it will be blocked as long as on-access scanning is active.  

    HTH

    Christian

    :1008454
Reply
  • 0

    Hello JK,

    Iframe labels malicious "web content"  (HTML,Scripts,...) - not necessarily from a web page, it can also arrive e.g. in an email. If you close and reopen the Quarantine Manager - is the item still there with the status Cleaning up? Where has it been found? Andrew/Agile for sure knows much more about threats and cleanup so I suggest you wait for him to comment on it. Meanwhile don't worry - if the initial scan found it it's likely from the past and will no longer be accessed by an application which could "activate" it. And even if you deliberately attempt to open it it will be blocked as long as on-access scanning is active.  

    HTH

    Christian

    :1008454
Children
No Data