I have installed Sophos AV for Mac installed on Mac Pro. All my downloads are normally directed to a folder on a separate volume. On access scanning works fine if I download any of the eicar file to anywhere on the drive containing the System and User directories. However, if I download to anywhere on the volume containing my Downloads folder, Sophos doesn't see it, nor does it do anything if I unzip eicar. If I do a manual scan then eicar is detected. Permissions on the problematic volume are:
It's just another internal volume on another physical disk. The disk has two volumes, my emergency boot/repair volume and what I call "Spare" for downloads, scratch space etc. Everything checks out OK on it.
If I try downloading eicar to a USB stick it is detected correctly.
Strange, but this problem seems to have been resolved by the simple expedient of copying everything off the offending volume, deleting the partition then recreating it. I copied everything back then recreated new folders and copied across contents of original folders. All the folder and file permissions are the same as before.
