Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 1 reply
  • Answers 1 answer
  • Subscribers 3 subscribers
  • Views 5780 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

interchk.chk file problem

kerryPalmer1

I’ve been having A LOT of trouble with the Troj/Ransom-CIA virus on my network….. I’m now at a point where I think I’ve finally cleaned it up but my main file server is telling me it’s still in c:\programData\Sophos\Sophos Anti-Virus\config\interchk.chk

I’ve run the scan a number of times and it wont go.

I’ve read about the interchk.chk file and I know it’s like a “temp” file…. So I THINK I can’t delete it and it’ll just rebuild. BUT I’m not 100% sure AND I can’t delete it anyway! (I assume because Sophos is using it all the time)

Is my information correct? Is there a better solution?



This thread was automatically locked due to age.
Parents
  • 0

    Hello kerry Palmer,

    I’ve run the scan a number of times
    do you get another detection when you run the scan or is it just that the old alert doesn't "go away"?
    If you don't get a new alert simply acknowledge (from the console) or Clear from list (from the local GUI/QM) the old one. SavService.exe holds a lock on interchk.chk (the alert won't anyway go away unless you can successfully delete it from QM). If you feel better you can AFAIK (100% is anyhow the maximum permissible value [;)]) safely delete it after you have stopped the AV service.

    Christian

Reply
  • 0

    Hello kerry Palmer,

    I’ve run the scan a number of times
    do you get another detection when you run the scan or is it just that the old alert doesn't "go away"?
    If you don't get a new alert simply acknowledge (from the console) or Clear from list (from the local GUI/QM) the old one. SavService.exe holds a lock on interchk.chk (the alert won't anyway go away unless you can successfully delete it from QM). If you feel better you can AFAIK (100% is anyhow the maximum permissible value [;)]) safely delete it after you have stopped the AV service.

    Christian

Children
No Data
Unfiltered HTML