Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Anti-Virus.app Disappearing from Mac's

Around 20 of our users have had their Sophos Anti-Virus.app application disappear from their /Applications/ folder completely. 


Each user is an admin on their own laptop, but even still someone needs to consciously remove the application and enter a password to remove it from the Applications folder. No user would consciously remove their anti-virus from their machine. 

Everyone's using OS X 10.9 or above. 

The Dashboard is reporting that these users are still okay, despite them not checking in for almost a week. 

I've done some searching for "Applications Disappearing" but all responses are acting like this is a bigfoot sighting. 

After contacting Sophos support I've been getting no help. I've run their diagnostics utility but all it can say is that an update was missed... 

Any help or similar cases would be appreciated! 

:56901


This thread was automatically locked due to age.
  • Further to this craziness, here is the log from the last time Sophos was detected on my laptop. 

    com.sophos.autoupdate: Updating catalogue information at 19:47:40 22 April 2015
    com.sophos.autoupdate: Catalogue updated at 19:47:44 22 April 2015
    com.sophos.autoupdate: Download started at 19:47:44 22 April 2015
    com.sophos.autoupdate: Download completed at 19:48:17 22 April 2015
    com.sophos.autoupdate: Update started at 19:48:17 22 April 2015

    After that, the next log entry was me re-installing Sophos. 

    :56902
  • I have just had this same problem.
    I am running 10.11.2 on a late 2011 model and just experienced repeated crashes possibly caused problems with the graphics cards or logic boards, (I'm not sure yet as I'm trying to get everything back into working order) but this thread provides an insight discussions.apple.com/.../5958077

    Anyhow, when I managed to get back in with a Safe Mode boot, it restarted and booted up normally with an error log, very slow performance/loading and strangely I noticed that Sophos was missing from my dock and applications. a search in Finder pulls up nothing.
    I have not run a scan for a few weeks but it was definitely not missing prior to this crash.

    Any idea how it could have uninstalled/vanished?
    Is it possible this was some form of malicious attack?
    Any help would be great.
  • StevenDrury said:

    Around 20 of our users have had their Sophos Anti-Virus.app application disappear from their /Applications/ folder completely. 


    Each user is an admin on their own laptop, but even still someone needs to consciously remove the application and enter a password to remove it from the Applications folder. No user would consciously remove their anti-virus from their machine. 

    Everyone's using OS X 10.9 or above. 

    The Dashboard is reporting that these users are still okay, despite them not checking in for almost a week. 

    I've done some searching for "Applications Disappearing" but all responses are acting like this is a bigfoot sighting. 

    After contacting Sophos support I've been getting no help. I've run their diagnostics utility but all it can say is that an update was missed... 

    Any help or similar cases would be appreciated! 

    :56901
     

    In the last month I too had Sophos disappear from the menu bar AND the program is gone from my Applications folder (I did find a "remove Sophos" program, don't know if that has always been there or not.)

    The best I can determine it happened sometime between December 1 2016 and Jan 12 2017.

    I remember checking early in December that Sophos was up to date and just noticed yesterday it was literally gone!

    I am on OS X 10.11.4 El Capitan.

    This is very concerning to say the least. I've never had a program removed from my computer without being aware of it.

  • I'd be curious to know if this situation was ever resolved. There are a couple of recent posts to the group reflecting a similar phenomenon even though it is more than two years later.