Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 1 subscriber
  • Views 6192 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

The attempt to delete the infected file "X" failed. The user does not have the rights...

JohnH

Hi all,

We are getting the following message more and more often:

The attempt to delete the infected file "X" failed.  The user does not have the rights to perform the action on the infected file

When I 'click -through' to the Sophos site it states that the Sophos Anti-Virus service should be run using an Administrator account.  When I checked, the service uses NT AUTHORITY\LocalService.  Is this the correct account or do we have an installation problem?

Thanks,

John

:384


This thread was automatically locked due to age.
Parents
  • 0

    Elmo,

    Thanks for clearing up the service account confusion.

    After some investigation it turns out that the majority of the files that generate this error are virus dll files in c:\windows\system32.  The file attributes are set to system, hidden & read only.  The NTFS permissions are set to Everyone: Read.

    Any ideas on how we can allow Sophos to delete these files?  Manual deletion isn't an option.

    :540
Reply
  • 0

    Elmo,

    Thanks for clearing up the service account confusion.

    After some investigation it turns out that the majority of the files that generate this error are virus dll files in c:\windows\system32.  The file attributes are set to system, hidden & read only.  The NTFS permissions are set to Everyone: Read.

    Any ideas on how we can allow Sophos to delete these files?  Manual deletion isn't an option.

    :540
Children
No Data
Unfiltered HTML