Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 8 replies
  • Subscribers 6 subscribers
  • Views 24611 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

TROJ/DOCDL-RF keeps coming back - help needed!

leonschroder

On my Mac (Yosemite and Sophos 9.2.7) I keep getting the Sophos virus alert for 'troj/docdl-rf'. When I open the quarentine manager the threat gets cleaned up and everything seems fine but it keeps returning. A little while later (hours) I get the same alert again.

I tried clicking 'show in finder' but it does not work,

also the path is not shown.

If I disconnect completely from the network the alert stops. However, on my network there are no servers, just the printer, TimeCapsule (that I have excluded from scans completely to try to find the cause), and two workstations, on and off.

Does anyone have an idea how to solve this problem because itis driving me mad.

Leon 

:1021253


This thread was automatically locked due to age.
Parents
  • 0

    Hey leon

    Can you try disconnecting the time capsule and see if the issue goes away? My guess that's where the issue is.

    If that doesn't work, some other things you can try are:

    - check on access log (it'll most likely be blank but may be worth checking)
    - clear web browser cache
    - set 'On access' to move threat on detection so it can't hide (Open Sophos preferences, authenticate, click on "On Access." Don't forget to set the "Move threat to folder" destination)

      

    :1021283
Reply
  • 0

    Hey leon

    Can you try disconnecting the time capsule and see if the issue goes away? My guess that's where the issue is.

    If that doesn't work, some other things you can try are:

    - check on access log (it'll most likely be blank but may be worth checking)
    - clear web browser cache
    - set 'On access' to move threat on detection so it can't hide (Open Sophos preferences, authenticate, click on "On Access." Don't forget to set the "Move threat to folder" destination)

      

    :1021283
Children
No Data
Unfiltered HTML