Cleanup Failed

Commonly it's where the threat is, or that it's not on disk any more.  Where is the file located?  Have a look at item in Quarantine Manager (select the failing item and authenticate with the padlock then check the path field).

• If the path is blank (after authenticating) then clear the item from the list and re-scan.  It could have been a temporary file in a browser cache etc.
  
  
• If the path is there and mentions a Time Machine volume then SAV can read the detection but can't delete it.  If the path is there you you want to see all of the path you'll have to open Console and look in the log for the type of scan you ran.  See: Where-are-the-logs-for-SAV-for-Mac

Else post a screenshot of the QM showing hte path or an extract from the log on Console.

I'm having a similar problem. I've looked at other threads, trying to figure out how to resolve, but most refer to Time Machine issues. That is not a problem in my case as my TM has not been activated in a few months. I need guidance on how to get rid of these **bleep** trojans plz!

You may find some interesting reading on keygen here. Note that both thomas_r. and MadMacs0 are very well versed in issues of OSX security.

https://discussions.apple.com/message/25104307#25104307

---

cheyenne wrote:

I'm having a similar problem. I've looked at other threads, trying to figure out how to resolve, but most refer to Time Machine issues. That is not a problem in my case as my TM has not been activated in a few months. I need guidance on how to get rid of these **bleep** trojans plz!

---

If the path isn't to a Time Machine backup or perhaps an email attachment then it probably because the path or file no longer exists. From the screenshots (thanks!) the detection is pointing to the path /Volumes/MCCS6LS16

You need to see if this path exists or not.  You can do this easily in Terminal, or if you're not familiar with that app: Since Volumes in hidden in Finder see this thread to reveal all in Finder...

http://openforum.sophos.com/t5/Mac-tools-help/How-to-show-all-hidden-files-in-Finder/td-p/18485

Then browse in Finder to the path and see if the 'MCCS6LS16' path is still there. Example:

Perhaps the volume is no longer mounted and hence you cannot clean up the non-existent files.  Hence clear the items detected from list in Quarantine Manager. If a USB pen or similar was mounted during the scan plug it back in and see if the same volume appears under /Volumes/.

What to do?  I can drag to trash and Sophos can't clear it.