Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 12 replies
  • Answers 1 answer
  • Subscribers 11 subscribers
  • Views 58474 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

'Troj/DocDl-CMF'

steve_999

Hi

I'm getting numerous detections this morning for 'Troj/DocDl-CMF' . The documents are originating from our intranet page. Though the odd thing I can download is, right click scan it and it comes back clean, but whenever I go to  'save as..' its flags it as a virus. and states 'The disk is Full. Free some space on the drive...'

I uploaded to document to virustotal.com and this even came back as clean from all the scan engines even Sophos. Is this a false detection? if so how do I stop it?

We are running Endpoint 10.6 and Enterprise console 5.3.1



This thread was automatically locked due to age.
Parents
  • 0

    Did anyone hear anything? I've had no reply from my sample submission. The issue seems to have stopped as I've had more alerts come in and I can't replicate it like I could yesterday. Looks like it was a false identification and I've got a day restoring documents :-(

Reply
  • 0

    Did anyone hear anything? I've had no reply from my sample submission. The issue seems to have stopped as I've had more alerts come in and I can't replicate it like I could yesterday. Looks like it was a false identification and I've got a day restoring documents :-(

Children
  • 0 in reply to steve_999

    Not heard anything back from Sophos myself yet.  Chased them up earlier today after sending in logging information from my enterprise console.

    Same as you, I've not had any more alerts, although I've not yet had chance to try and restore the files that were deleted yesterday

Unfiltered HTML