Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 15 replies
  • Subscribers 6 subscribers
  • Views 9666 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Quarantined file disappeared from the manager

doxsys
I'm running a scan on my entire hard drive using the Mac OS free edition. I had a warning pop up that a file was infected and quarantined. I opened the quarantine manager per instructions, which had one file in it. I highlighted the file, and when I clicked on the 'more details' button, the file disappeared. The scan is set to just log bad files (rather than move them or clean them up), so this is a bit disconcerting. The only thing I noticed about it was that it was called Info.plist. Any thoughts on whether this is something to worry about?
:1006353


This thread was automatically locked due to age.
Parents
  • 0

    Thank you for the added feedback; it does indeed look like an issue between the Quarantine Manager and Path Finder from what you're describing.  It seems like the QM is getting the wrong files listed for the detection -- is locking them for access (which is what the QM is supposed to do) and then the actual threat is flushed from the cache, removing the detection from the QM.  This is just my subjective take on the situation though; I'll see if it can be replicated, and if it can, I'll forward the issue on to the product team.

    :1006655
Reply
  • 0

    Thank you for the added feedback; it does indeed look like an issue between the Quarantine Manager and Path Finder from what you're describing.  It seems like the QM is getting the wrong files listed for the detection -- is locking them for access (which is what the QM is supposed to do) and then the actual threat is flushed from the cache, removing the detection from the QM.  This is just my subjective take on the situation though; I'll see if it can be replicated, and if it can, I'll forward the issue on to the product team.

    :1006655
Children
No Data