I also have this problem -- whenever I open Evernote, Sophos says "'Virus/Spyware' Troj/HkMain-CT has been detected and listed in Quarantine Manager." I am running Version 9.4.0.
Are you still having this problem? My guess is that there's a file stored somewhere in your Evernote that contains the malware, so it gets detected every time you open the Application.
Can you take a look at the scan log to see the actual file that is being detected as malware? Then you should be able to manually delete the file via Finder, or else by logging into the Web version of Everynote, and manually deleting the file.
--To Access the Scan Log--
- Click the Sophos menu bar Icon
- Click on Open Scans...
- Alt-click the white space by "Scan this mac" and select View Scan Log...
This will open the Scan Log in an application called Console. The scan log gives you detailed information about the most recent scans, such as start time, what was scanned, scan configuration, any threats that were detected, etc. You should also see any errors that may have been encounted by the scanner.
Are you still having this problem? My guess is that there's a file stored somewhere in your Evernote that contains the malware, so it gets detected every time you open the Application.
Can you take a look at the scan log to see the actual file that is being detected as malware? Then you should be able to manually delete the file via Finder, or else by logging into the Web version of Everynote, and manually deleting the file.
--To Access the Scan Log--
- Click the Sophos menu bar Icon
- Click on Open Scans...
- Alt-click the white space by "Scan this mac" and select View Scan Log...
This will open the Scan Log in an application called Console. The scan log gives you detailed information about the most recent scans, such as start time, what was scanned, scan configuration, any threats that were detected, etc. You should also see any errors that may have been encounted by the scanner.