Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

No Option for Cleaning Up Threats / Mac OSX

Hello.  Ran first scan on Mac OSX 10.6.7.  Here is the screen shot for the results --

http://i852.photobucket.com/albums/ab89/markgrant_bucket/sophosscreenshot.jpg

As you can see, the "Clean Up Threat" button is grayed out.  Should I "Clear From List" or just keep them in Quarantine?

:1003011


This thread was automatically locked due to age.
Parents
  • If the manual clean option doesn't work (creating a custom scan with Delete Files enabled), then you need to locate the file.  If there's no file path in Quarantine Manager, then something's up -- without a reference path, the item should not be listed in the quarantine.  However, based on the detection name, I can likely tell you where the file is located.  If it's FakeAV, it'll be in your download folder, a backup of your download folder, or your Applications folder (if it actually installed).  If it's one of the Java detections, it'll be in your Java webCache folder in one of the Library/Caches folders on your system.  Most of the other ones will be in your Mail Attachments folder, unless you've got a shared partition that is used under Windows as well.

    Thinking about it, it's likely that if there's no file path but the detection name exists, the detection was on removable/networked media that is currently inaccessible, such as a USB drive or your Time Machine volume.

    :1003751
Reply
  • If the manual clean option doesn't work (creating a custom scan with Delete Files enabled), then you need to locate the file.  If there's no file path in Quarantine Manager, then something's up -- without a reference path, the item should not be listed in the quarantine.  However, based on the detection name, I can likely tell you where the file is located.  If it's FakeAV, it'll be in your download folder, a backup of your download folder, or your Applications folder (if it actually installed).  If it's one of the Java detections, it'll be in your Java webCache folder in one of the Library/Caches folders on your system.  Most of the other ones will be in your Mail Attachments folder, unless you've got a shared partition that is used under Windows as well.

    Thinking about it, it's likely that if there's no file path but the detection name exists, the detection was on removable/networked media that is currently inaccessible, such as a USB drive or your Time Machine volume.

    :1003751
Children
No Data