The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
You can run on-demand scans via Terminal, Mac OS X's command line interface. This article provides common sweep commands and what they do.
Applies to the following Sophos product(s) and version(s) Sophos Anti-Virus for Mac OS X
Operating systems Mac OS X
From Spotlight type 'Terminal' and press enter. Example:
The full usage can be displayed in Terminal by running the command:
The minimum parameters to run a sweep scan is a path to scan (e.g., 'sweep ~' to call the program and scan the current user's home folder). Certain parameters are included by default, without needing to include them. Therefore running sweep with just a path parameter and no other options includes the following settings:
Note: Any option (such as those listed above) can be prefixed with 'n' to invert their meaning (for example, -nsc is the inverse of -sc).
Common sweep parameters examples are show below.
The table below shows some of the more common commands you may want to use.
sudo sweep /
sweep -archive ~/Downloads
sudo sweep -pua /
sudo sweep -ns -p=/Users/aUser/Desktop/sweep.log /
sudo sweep / -dn 2> ~/Desktop/sweep.log
sweep -di -p=/Users/aUser/Desktop/sweep.log ~
sweep -remove -p=/Users/aUser/Desktop/sweep.log ~
Warning: Use the sudo command with care. If you attempt to 'remove' or 'disinfect' system files your computer's operating system may experience problems. If using sudo to scan the whole drive we recommend logging the results and reviewing the log afterwards for item that may need action taking against them.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.