Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Can't Manually Remove OSX/iWorkS-A Threat. How Can I Get Rid Of It?

My Mac was used with a lot of programs already installed and I always wondered if there was anything on it. Being a previous PC guy I have seen my fair share of bugs. I decided that even though I was on a Mac it was time to try an anti-virus program. Sophos came recommended so I installed it on my early 2009 iMac. I have upgraded the OS to Mountain Lion if that is important. 

I ran the program and had about 5 threats, most dealing with the Windows side of things. I don't have Windows installed so it wasn't a real worry and they were removed. I also had OSX/iWorkS-A (Adobe CS4 Master Collection.toast) and followed the instructions on the Sophos website to remove it (setting up a specific scan and then delete it). They were very basic and easy to do but the threat isn't being removed and is verified according to subsequent scans.

I am not a Mac genius by any stretch of the imagination so maybe you guys can help me out? 

Thanks in advance

Mark

:1012804


This thread was automatically locked due to age.
Parents
  • Hi MLN1963,

    The guys in SophosLabs believe the product should automatically clean up that threat, so its odd that its not doing that for you. Definitely interested to learn more, if you are willing to share samples or at least some info about the paths of the files being reported in the Quarantine Manager.

    When you created your custom scan, did you select "When a threat is found: Delete threat" in the options panel? That is step 15, just confirming that your scan was set up like that.

    Are the files to be removed located on a removable drive or on a Time Machine backup? That sometimes prevents us from taking action.

    Looking forward to your response.

    :1012826
Reply
  • Hi MLN1963,

    The guys in SophosLabs believe the product should automatically clean up that threat, so its odd that its not doing that for you. Definitely interested to learn more, if you are willing to share samples or at least some info about the paths of the files being reported in the Quarantine Manager.

    When you created your custom scan, did you select "When a threat is found: Delete threat" in the options panel? That is step 15, just confirming that your scan was set up like that.

    Are the files to be removed located on a removable drive or on a Time Machine backup? That sometimes prevents us from taking action.

    Looking forward to your response.

    :1012826
Children
No Data