11-17-2010 06:57 AM
technorandy wrote:… relevant parts from the Sophos Anti-Virus.log, not sure if this is the one you need …
The extract mentions Access to the file denied in a few places, but no mention of clean up or deletion/removal.
For viewing logs, the current version of SAV lacks a view menu. There are three different GUIs for the different classes of log.
Logs exist at the following paths:
/Library/Logs/
~/Library/Logs/Sophos Anti-Virus/Scans
Try to find a log that corresponds with the time of the problem.
11-17-2010 07:54 AM - edited 11-17-2010 07:58 AM
grahamperrin wrote:
The extract mentions Access to the file denied in a few places, but no mention of clean up or deletion/removal.
For viewing logs, the current version of SAV lacks a view menu. There are three different GUIs for the different classes of log.
Logs exist at the following paths:
/Library/Logs/
- maybe just one file, Sophos Anti-Virus.log
~/Library/Logs/Sophos Anti-Virus/Scans
- multiple folders, each one of which may contain multiple logs.
Try to find a log that corresponds with the time of the problem.
__________________________________________________
I have a total of 2 log files:
/library/logs/Sophos Anti-virus.log (that the previous sample was from) reproduced in its entirety http://pastebin.ca/1994650
and
~/library/logs/Sophos Anti-virus/Scans/Scan This Mac/2010-11-02 18/20/39 +0000.log corresponding to the single full system scan I have done. http://pastebin.ca/1994655
I can see the scan, the files it found that were infected , and some corrupt files. There seems to be no log or entry for the removal of the items that I can see. The generic keygen it found was removed via the quarantine manager in the app
11-17-2010 08:17 AM
An updates is now available - please see