This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Threat with no filename/path, can't be removed. So what do I do?

I occassionally get entries like this in my log:

com.sophos.intercheck: 2013-09-20 13:17:37 -0400 Threat: 'Mal/DrodZp-A' detected in
com.sophos.intercheck: Access to the file denied
com.sophos.intercheck:

There is no filename/path ("detected in" is all the log says -- eol) so I can't view in finder and attempts to remove hang/fail as would be expected. If I remove from the quarantine list, it'll just show up again later.

I have Time Machine/Time Capsule and I suspect it's something in a backup file on that volume but that's just my wild guess -- it is weird that Sophos finds it, doesn't/can't indicate the location, offers removal as an option, but is unable to remove it.

Anyone have any insight into what this is (the "no file/path" aspect of the result, not the trojan itself)?
Recommended course of action?

I've searched a bunch on this forum and haven't seen a definitive explanation for the null filename/path.

Thanks!

This thread was automatically locked due to age.

0 pattik over 10 years ago

That doesn't work. Tried to select Clear From List but it doesnt remove it from the list.
:1019453
Cancel
Vote Up 0 Vote Down

Cancel
0 baggpus over 10 years ago

And in fact I am having the same problem - the same 2 trojans that cannot be cleaned up its driving me nuts - I have deleted a years worth of backups in my time machine and external drive but it just keeps popping up I too am thinking I might just have to uninstall sophos as I actually believe that this is false reporting
:1019499
Cancel
Vote Up 0 Vote Down

Cancel
0 HugoChavez over 9 years ago

"For now, you can simply remove these entries from your QM and ignore them."
This is not acceptable. The threat warnings are intrusive, frequent and disruptive. Fix your software. It is broken & you should be ashamed.
:1020926
Cancel
Vote Up 0 Vote Down

Cancel
0 MichaelJonas over 9 years ago

I tried turning off Time Machine, waiting 15 minutes for the Time Machine cache to clear, and then re-started my MAC-Mini. But, alas, Mal/Dyreza-AC popped up again. Surely Sophos can correct this problem...there's no file on my drive.
Cancel
Vote Up 0 Vote Down

Cancel
0 Randyw over 8 years ago

Has anyone been able to solve this? I'm running into a similar/same problem:

The SAV log indicates:

2015-12-04 09:01:00 -0800 Threat: 'Troj/Mdrop-HAC' detected in
com.sophos.intercheck: Access to the file denied

I've detailed my issue here: community.sophos.com/.../33670
Cancel
Vote Up 0 Vote Down

Cancel
0 GregSmith over 8 years ago

I have exactly the same problem, only it is for SpiGot or Generic PUA DJ. Originally I was able to find and remove these infections from both my Hard Drive and my Time Machine Backups but now Sophos keeps warning me about a threat with no filepath and when I go into the Quarantine Manager, there is no threat there!
Cancel
Vote Up 0 Vote Down

Cancel