Sophos fails to delete JavaDI-CH

Question

Hello,

I have a virus detected by Sophos for quite some time now. It's the JavaDI-CH Trojan and it's located in a \\.\GLOBALROOT\Device\...\harddiskVolumeShadowCopy\..\ folder.

However Sophos can't delete or move the file and when trying to manually accessing the file I am told that the network path was not found.

My PC is part of the universitiy network and I am not quite sure what to do here.

Any tips?

This thread was automatically locked due to age.

A_K · Accepted Answer

Hi Quieselkopf,

It is often easy enough to identify the true location on disk

instead of;

\\.\GLOBALROOT\Device\...\harddiskVolumeShadowCopy\..\ folder

it will be

C:\folder

Having identified the location :

Clear from list within the Quarantine Manager for the detection.

Do a right click scan of the folder the file is in and redetection should occur with the true file path

Action cleanup if available

If clean up is not available then raise a ticket with Sophos Support.