This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Quarantine Manager shows threats, scan doesn't show threats, impossible to clean up... :(

Hello,

I've attempted multiple times, in different ways, to clean up these threats on my mac. I have looked online and followed the instructions I've found on this site, but nothing has worked.

Whenever I run a complete scan, the program freezes and never finishes running the scan. I have to force quit it.

I customized a scan to the folders where the treats are supposed to be and Sophos said that no threats were found. But when I open the Quarantine Manager, there's three threats. I've tried the clean up multiple times and there's an error each time, regardless of whether I select them individually or all at once. I don't know what to do anymore and I'm desperate!

I have attached screenshots of the threats to this post.

If anyone could please help me as soon as possible, I would greatly appreciate it!!

Thanks ahead of tme!

This thread was automatically locked due to age.

0 ruckus over 11 years ago

Can you submit a sample of your /Library/Preferences/SystemConfiguration/preferences.plist file?

http://www.sophos.com/en-us/support/knowledgebase/11490.aspx

I'd be interested to see what SophosLabs say about the file.
:1014897
Cancel
Vote Up 0 Vote Down

Cancel
0 dremagomez over 11 years ago

I have the free version of Sophos, can I still submit a sample of my file on the link you attached?
:1014901
Cancel
Vote Up 0 Vote Down

Cancel
0 ruckus over 11 years ago

Yep, anyone can submit samples (we want sample). It's the contacting our main Technical Support teams for help with the free tools that isn't possible.

Submit the sample. Say that it is detected as X (Troj/.... etc) and that you cannot cleanup the file. If you get a reference let me know.
:1014903
Cancel
Vote Up 0 Vote Down

Cancel
0 ruckus over 11 years ago

I see the sample. Ignore the reply from Support. I'll talk to the labs and post back what to do.
:1014905
Cancel
Vote Up 0 Vote Down

Cancel
0 dremagomez over 11 years ago

Thank you! Really appreciate it.
:1014907
Cancel
Vote Up 0 Vote Down

Cancel
0 Agile over 11 years ago

I've looked at the detection names and file... and my best suggestion is to clear your quarantine and reboot your computer. After doing so, please let us know if a re-scan brings this detection back.
The issue here is that it's detecting on different files, and for some reason the plist is being flagged up instead. The files you're looking for will likely have been downloaded via P2P software and be Microsoft Windows Media (.wmv, .asf, etc) files -- most likely video files that fail to play at all on a Mac, even with Flip4Mac installed.
Find those files and delete them, as they redirect to malware download pages in the background while loading the video. The files should have been originally dated sometime around 2008.
:1014909
Cancel
Vote Up 0 Vote Down

Cancel
0 dremagomez over 11 years ago

How exactly do I go about doing that? Sorry, not that tech savy.
:1014983
Cancel
Vote Up 0 Vote Down

Cancel
0 ruckus over 11 years ago

Are there files on your computer that have the file extensions mentioned by ?

If you use a peer to peer program then they may be contained in the download/shared folder that program uses.
:1014999
Cancel
Vote Up 0 Vote Down

Cancel