This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How do I clean this alert up?

Hi. Just joined the form because I'm getting the message:

Malware not cleaned up: 'Troj/RarMal-CW' at '/'

From the Sophos database looks as though this started to be seen late March this year when it appeared on my Mac. 

Two questions:

1) How do I clean it up? Delete all .rar file, if any? 

2) Any idea where it came from - some spam email , which I try and delete asap. 

thanks, 

James



This thread was automatically locked due to age.
  • No need to delete all .rar files - you may want some of them.

    The '/' bit hints it found something in the root of a drive - not sure what drive.  Have a look at the logs (https://community.sophos.com/products/free-antivirus-tools-for-desktops/f/17/t/9869) and see if there is more information.  You may be able to tell which drive the item is located on.

    Otherwise clear all items from the Quarantine Manager and run a new scan to see what is now detected.  Refer back to the log (see video in the above link) to see exactly where the file is located.  A common problem with failing to clean up or files being detected and then vanishing are when they are on drives that are no longer connected - or even in a Time Machine back up volume.

     - - - - - - - - - - - -

    Communities Moderator, SOPHOS
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.