Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 6 subscribers
  • Views 8265 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

InterCheck.app is asking me to accept incoming connections

marinnen128

I've been using Sophos Antivirus for Mac Home Edition for a long while, under various OS X versions. Currently running 9.0.11 on Mac OS X version 10.8.5 (Mountain Lion). Today, for the first that I can remember, I've got the popup:

Do you want the application "InterCheck.app" to accept incoming network connections?

I'm wondering if this is legitimate? My concern is if this might be some hack?

Any help is appreciated.

:1018319


This thread was automatically locked due to age.
  • 0

    Hmmm.  You could try running the codesign command in a Terminal window.  Example:

    2014-07-14_13-45-49.png

    If that doesn't work you could try an upgrade to v9.1...

    http://openforum.sophos.com/t5/Sophos-Anti-Virus-for-Mac-Home/SAV-for-Mac-9-1-Preview/td-p/18025

    :1018353

     - - - - - - - - - - - -

    Communities Moderator, SOPHOS
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • 0

    Thanks for the suggestion. I ran the command and got the same valid response as you did.

    I wonder if anyone from Sophos would be able to confirm that InterCheck is legitimately suddenly asking to accept the incoming connections and what's their nature?

    :1018387
  • 0

    I don't think anything has changed - I will ask.

    Google the general Mac firewall prompt it seems it could be a permissions problem.  Hence it's worth opening Disk Utilty from Spotlight and running a check on permissions etc.  Example:

    permissions.png

    :1018435

     - - - - - - - - - - - -

    Communities Moderator, SOPHOS
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • 0
    marinnen128 wrote:

    Thanks for the suggestion. I ran the command and got the same valid response as you did.

    I wonder if anyone from Sophos would be able to confirm that InterCheck is legitimately suddenly asking to accept the incoming connections and what's their nature?

    You should be suspicious of this. InterCheck does not act as a network server, and you should not normally see prompts like this.

    Caveat: it may be possible (in ways we haven't yet discovered with the normal Apple firewall) to receive that pop-up based on the fact that InterCheck does listen for local communications. And only local, on the same computer, also called "loopback" - never for any external network connections. Several of our components using the loopback address (local network interface, 127.0.0.1) to communicate.

    Knowing that InterCheck is good on disk is a great start but doesn't necessarily guarantee that the copy in memory is good. I'd suggest restarting InterCheck or a reboot.

    :1018447

    ---

    Bob Cook (bob.cook@sophos.com) Director, Software Development

Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?