'Troj/DocDl-CMF'

Hi,

We also have the same issue since this morning.

We are running the same versions as Steve

PS - our files are on our main file server.  Many of the files are months/years old

We're also seeing the same activity and on the same versions. Just dropped a support call to Sophos to see what they say.

I've also reported to support.  If any of us get a response from Sophos, can we update this forum post?

Did anyone hear anything? I've had no reply from my sample submission. The issue seems to have stopped as I've had more alerts come in and I can't replicate it like I could yesterday. Looks like it was a false identification and I've got a day restoring documents :-(

Not heard anything back from Sophos myself yet.  Chased them up earlier today after sending in logging information from my enterprise console.

Same as you, I've not had any more alerts, although I've not yet had chance to try and restore the files that were deleted yesterday

Having the same problem. The two files it flagged go back years...very bizarre. I'm curious what Sophos Support has to say about it.

Running Mac OS 10.6.8 and Sophos 9.4.2. I also have repeatedly been getting the same alert -  cleaning appeared to work, but then in a few minutes I would get another alert.

Sophos tells me the problem document is this: /Users/ME/Library/Mail/IMAP-ME@gmail.com@imap.gmail.com/[Gmail]/Spam.imapmbox/Messages/522349.2.emlxpart (where I have substituted "ME" for my name).

I went to 522349.2.emlx and put it in the trash, then emptied the trash. It appeares to be gone - I haven't had any alerts for about 30 minutes. Fingers are crossed.

I'm not sure why the above post is a suggested answer?  It's just a file that's been flagged as a trojan.

Anyone heard back from Sophos yet, I'll give them a call later today if they haven't got back to me

"How do I stop it" was the question. The answer for me was going to and eliminating the offending doc made the problem go away.

I didn't see anyone else offer this, and so I thought it might help. Many other people may not be as sophisticated as yourself and might not have understood to go to the bad document and delete it.

True, it didn't fix whatever bug made Sophos cycle back and forth, but that's way above my pay scale.  ;)