Can't delete OR find Mal/Phish-A

Hello Everyone, I hope you can help me with a challenge I am having. Currently I have Sophos Anti-Virus Home Edition version 9.2.4 on my Mac (OS X Yosemite 10.10.3) Reason for the post is I have a virus (Mal/Phish-A) that keeps coming up and I am not able to clean it or find it? (I have included screen shots for you, hopefully I attached them correctly and you can see them) When I unlock "Sophos" if I get there in time (sometimes it just automatically dissapears by the time it unlocks) I highlight it and click "reveal in finder" and nothing happens, if i click clean up the threat it starts and I will get the mesaage could not clean up the virus or it goes on for a long time and eventually dissapears (have had both happen) Also the virus/message keeps appearing every hour or so. I have reached to Sophos directly, checked the message boards, as well as made sure my programs are all up to date but still no resolution. From what I have seen on the message boards most of the time it directs us to either our e-mail or time machine. (As an FYI I am using Microsoft Oulook for Mac.) Unfortunately there is no path name listed in Sophos when it lists the virus and also it will not "reveal in finder" so I don't know where it is? Can you provide me some direction as to how to get Sophos to clean up this virus or at the very least help me identify where it is so I can manually delete the program? Feel free to let me know if you require any further informaiton or if you have any questions. Thank you in advance for your support.

Hey Max,
Sorry you're having trouble with this. If you're having trouble finding the location of the threat, you can try checking the scan log.
This will open up the console program. If you scroll through the scan log, you should hopefully see the file path of where the threat was detected. Feel free to post a copy of the output here and I can take a look. 
 

Similar Messages

  • How can i delete the find my iphone app on my ipod if i can't remember the password to get into it.

    how can i delete the find my iphone app on my ipod if i can't remember the password to get into it. I've tried everything reset my ipad, however, it keeps telling me to delete the app. But I can't get into the device to delete the app.
    What else can I do?
    Please help!

    If the iPad was running iOS 7,  iCloud: Find My iPhone Activation Lock in iOS 7
    http://support.apple.com/kb/HT5818
    How can I unlock my iPad if I forgot the passcode?
    http://www.everymac.com/systems/apple/ipad/ipad-troubleshooting-repair-faq/ipad- how-to-unlock-open-forgot-code-passcode-password-login.html
    iOS: Device disabled after entering wrong passcode
    http://support.apple.com/kb/ht1212
    How can I unlock my iPad if I forgot the passcode?
    http://tinyurl.com/7ndy8tb
    How to Reset a Forgotten Password for an iOS Device
    http://www.wikihow.com/Reset-a-Forgotten-Password-for-an-iOS-Device
    Using iPhone/iPad Recovery Mode
    http://ipod.about.com/od/iphonetroubleshooting/a/Iphone-Recovery-Mode.htm
    You may have to do this several times.
    Saw this solution on another post about an iPad in a school environment. Might work on your iPad so you won't lose everything.
    ~~~~~~~~~~~~~
    ‘iPad is disabled’ fix without resetting using iTunes
    Today I met my match with an iPad that had a passcode entered too many times, resulting in it displaying the message ‘iPad is disabled – Connect to iTunes’. This was a student iPad and since they use Notability for most of their work there was a chance that her files were not all backed up to the cloud. I really wanted to just re-activate the iPad instead of totally resetting it back to our default image.
    I reached out to my PLN on Twitter and had some help from a few people through retweets and a couple of clarification tweets. I love that so many are willing to help out so quickly. Through this I also learned that I look like Lt. Riker from Star Trek (thanks @FillineMachine).
    Through some trial and error (and a little sheer luck), I was able to reactivate the iPad without loosing any data. Note, this will only work on the computer it last synced with. Here’s how:
    1. Configurator is useless in reactivating a locked iPad. You will only be able to completely reformat the iPad using Configurator. If that’s ok with you, go for it – otherwise don’t waste your time trying to figure it out.
    2. Open iTunes with the iPad disconnected.
    3. Connect the iPad to the computer and wait for it to show up in the devices section in iTunes.
    4. Click on the iPad name when it appears and you will be given the option to restore a backup or setup as a new iPad (since it is locked).
    5. Click ‘Setup as new iPad’ and then click restore.
    6. The iPad will start backing up before it does the full restore and sync. CANCEL THE BACKUP IMMEDIATELY. You do this by clicking the small x in the status window in iTunes.
    7. When the backup cancels, it immediately starts syncing – cancel this as well using the same small x in the iTunes status window.
    8. The first stage in the restore process unlocks the iPad, you are basically just cancelling out the restore process as soon as it reactivates the iPad.
    If done correctly, you will experience no data loss and the result will be a reactivated iPad. I have now tried this with about 5 iPads that were locked identically by students and each time it worked like a charm.
    ~~~~~~~~~~~~~
    Try it and good luck. You have nothing more to lose if it doesn't work for you.
     Cheers, Tom

  • Can I delete a Finder keyboard shortcut?

    I often use the keyboard shortcut Option-Command-1 in Safari to get to the Top Sites page.
    Problem is, if I accidentally bring the Finder to the front and use that same shortcut, all my Desktop stuff is unintentionally rearranged, because this is the Finder shortcut for View->Clean up by->Name
    I'd like to delete (or change) the Finder shortcut but can't seem to do it in System Prefs.
    Can someone please explain how (if it's possible)?
    I'm using OS 10.8.5

    You could remap the Finder -> View -> Clean Up By -> Name (or Arrange by Name) to a different keyboard shortcut.
    System Preferences -> Keyboard -> Keyboard Shortcuts -> Application Shortcuts -> [+]
    Select "Finder" as the Applications in the popup pick list
    Menu Title: "Name"
    Keyboard Shortcut: Press the key combination you want as the new shortcut.
    See if that helps.
    If that doesn't work, then consider getting a HotKey utility.  If you have a trackpad, I would suggest BetterTouchTool, as it will also allow you to create lots of Trackpad gestures of your own.  Then map Command-Option-1 to whatever you like when in the Finder.

  • Can't delete or find non existing files in Errors tab and in/out palette

    I have two files (findlaw.html and cyrites.html) that no longer are in use that I want to trash.
    When I trash either of the files, I  get 5 Missing Files in the Error Tab that are supposedly linked to these two files I want to trash.
    I've gone through the site many times and can't find these missing files.
    I have back up copies of the 2 files I want to trash and when I put them back in the site, the missing files are no longer in the Missing Tab.
    When I use the In and Out palette and select either findlaw.html or cyrites.html, sure enough the files that end up in the Missing tab are indicated as being linked to these two files.
    from within the In/Out palatte, showing one of the files I want to trash, and showing the 5 files linked to it, if I mouse over any of these 5 files I get the path where they supposedly
    are hidding out, but when I go to the folders they are supposed living in, they are not there.
    Also when mousing over these files it says: template.html (Void) - that's one of the real names of the missing 5 files.
    I've tried doing: Site > Update > Refresh All  - but this doesn't break the connection of the missing 5 files to the 2 pages I want to trash.
    Any ideas?

    You can make a completely new library from these directions
    http://docs.info.apple.com/article.html?path=iTunesWin/8.1/en/15502.html
    You have to press AND HOLD the shift key.
    As for why some songs won't re-add to itunes, maybe the MP3 headers are causing it. iTunes 7 and later has gotten really picky about them. Here's a good web link on that:
    http://trevinchow.com/blog/tag/mp3-tag-validator/

  • I was backing up my iPhone and importing photos onto iPhoto at the same time , then suddenly it says no more space available (i had 48GB before i do this and now i have 18GB) i can't find the back up or the photo anywhere , how can i delete them ?

    i was backing up my iPhone and importing photos onto iPhoto at the same time , then suddenly it says no more space available (i had 48GB before i do this and now i have 18GB) i can't find the back up or the photo anywhere , how can i delete them ? i dont need the pictures or the back ups , i want to delete them but they are not there

    Empty the Trash if you haven't already done so. If you use iPhoto, empty its internal Trash first:
    iPhoto ▹ Empty Trash
    Do the same in other applications, such as Aperture, that have an internal Trash feature. Then reboot. That will temporarily free up some space.
    According to Apple documentation, you need at least 9 GB of available space on the startup volume (as shown in the Finder Info window) for normal operation. You also need enough space left over to allow for growth of the data. There is little or no performance advantage to having more available space than the minimum Apple recommends. Available storage space that you'll never use is wasted space.
    When Time Machine backs up a portable Mac, some of the free space will be used to make local snapshots, which are backup copies of recently deleted files. The space occupied by local snapshots is reported as available by the Finder, and should be considered as such. In the Storage display of System Information, local snapshots are shown asBackups. The snapshots are automatically deleted when they expire or when free space falls below a certain level. You ordinarily don't need to, and should not, delete local snapshots yourself. If you followed bad advice to disable local snapshots by running a shell command, you may have ended up with a lot of data in the Other category. Reboot and it should go away.
    See this support article for some simple ways to free up storage space.
    You can more effectively use a tool such as OmniDiskSweeper (ODS) to explore the volume and find out what's taking up the space. You can also delete files with it, but don't do that unless you're sure that you know what you're deleting and that all data is safely backed up. That means you have multiple backups, not just one.
    Deleting files inside an iPhoto or Aperture library will corrupt the library. Any changes to a photo library must be made from within the application that created it. The same goes for Mail files.
    Proceed further only if the problem isn't solved by the above steps.
    ODS can't see the whole filesystem when you run it just by double-clicking; it only sees files that you have permission to read. To see everything, you have to run it as root.
    Back up all data now.
    If you have more than one user account, make sure you're logged in as an administrator. The administrator account is the one that was created automatically when you first set up the computer.
    Install ODS in the Applications folder as usual. Quit it if it's running.
    Triple-click anywhere in the line of text below on this page to select it, then copy the selected text to the Clipboard by pressing the key combination command-C:
    sudo /Applications/OmniDiskSweeper.app/Contents/MacOS/OmniDiskSweeper
    Launch the built-in Terminal application in any of the following ways:
    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
    ☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
    Paste into the Terminal window (command-V). You'll be prompted for your login password, which won't be displayed when you type it. You may get a one-time warning to be careful. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.
    The application window will open, eventually showing all files in all folders, sorted by size with the largest at the top. It may take a few minutes for ODS to finish scanning.
    I don't recommend that you make a habit of doing this. Don't delete anything while running ODS as root. If something needs to be deleted, make sure you know what it is and how it got there, and then delete it by other, safer, means. When in doubt, leave it alone or ask for guidance.
    When you're done with ODS, quit it and also quit Terminal.

  • Can't delete file from LR, requires password from finder Mac OS

    I have an older Powermac running OSX 10.5.8. I store all of my images under the same folder on the same external hard drive. For some reason, and this has never happened before, has always functioned normally before this, I don't know why, images cannot be deleted and moved to the trash in LR. From the finder level, those files each require I type in my password (Finder requires that you type in your password.) This has never happened before, I've tried a shut down and cold re-boot but the behavior persists. Images are not locked and everything looks normal but not behaving normal. I realize this is not a Lightroom problem, but I need to delete from Lightroom because it is where I can review the images best while choosing which ones can be deleted. Anyone seen this Mac behavior before? Any fix you know of?
    Thanks,
    Ken

    Sound's like the files don't have the correct permissions. Since they're on an external drive, you could just select the drive's icon, bring up the info window (Cmd+i) and tick the checkbox "Ignore ownership on this volume".
    I do that with all my additional internal/external drives by default. It's usually no problem unless you need to prevent other users from accessing the files.

  • Where can I find the Start up disk and how can I delete file from it.

    where can I find the Start up disk on theMac Book Air?
    How can I delete files from it?

    The startup disk is the internal SSD in your MBA.  You may delete files by draging the file  to Trash (or clicking on them and then execute COMMAND+Delete).  Then empty Trash.
    Ciao.

  • How can I delete an app from launchpad, that doesn't have the little cross in the left top corner. The app isn't an App Store app. The application is also not present anymore in my application's folder in finder.

    How can I delete an app from launchpad, that doesn't have the little cross in the left top corner. The app isn't an App Store app. The application is also not present anymore in my application's folder in finder.
    I tried to use the attached command through TERMINAL :
    sqlite3 ~/Library/Application\ Support/Dock/*.db "DELETE from apps WHERE title='Help';" && killall Dock
    sqlite3: Error: too many options: "DELETE from apps WHERE title='Help';"
    Use -help for a list of options.
    But i didn't work as I got the above error message.
    best regards
    Jeroen

    I'm in the same boat as you -- except that I manage both a school lab (volunteer job) and macs in the enterprise (pay job).  What I think we need is the Education Volume Purchasing Program
    http://www.apple.com/education/volume-purchase-program/faq.html
    Unfortunately this all seems a little rough around the edges -- for example, I have found updates for AppStore apps on the support.apple.com updates download site, but then when I install them via ARD they don't actually update the software.  (The AppStore icons still show as needing the updates, and the version info reports the old version.)  The documentation is also vague about which AppleID to use in which circumstance.  I think they just haven't finished thinking through the implications of the various procedures and policies upon the various kinds of customers.  When we deployed Mountain Lion on the school lab, we made an install usb and went around and installed it on each computer -- and it appears that you are on the honor system as far as paying for all of the licenses that you install.  We did!  But they appear to have no way to enforce it.
    So far, I have only deployed 9 Lion macs in my day job, and our "solution" to the AppStore showing updates problem has been to drag the AppStore icon off of the users' docks so they don't see them!

  • How can I delete multiple files at a time from "Finder"

    I can't possible delete the thousands of junk files that showed up in Finder once I downloaded Maverick.  I can't delete more than one at a time now.  Why won't the highlighting stay in place on more than one file that I want to delete?

    How are you trying to select multiple files?
    What makes you think that "thousands of junk files [...] showed up in Finder once I downloaded Maverick" (or even installed it)?

  • I need to change my iCloud email address.  I changed it for my Apple id but I can't log out of iCloud to change it there.  Find my iPad is activated so I can't delete my iCloud account.  I don't have the email address the iCloud login has anymore.

    I need to change my iCloud email address.  I changed it for my Apple id but I can't log out of iCloud to change it there.  Find my iPad is activated so I can't delete my iCloud account.  I don't have the email address the iCloud login has anymore so I can't have the password sent there.  To sum it up, iCloud has an old email for the account log-in.  I don't remember the password for the old email.  I have Find My iPad activated so the iCloud account cannot be deleted.  And I am already logged out of iTunes & App Store. 

    If you mean that Find My Phone is asking for a password to a different Apple ID to your current Apple IDand that ID is a previous version of your current ID, not an entirely different one.
    This feature has been introduced to make stolen phones useless to those that have stolen them.
    However it can also arise when the user has changed their Apple ID details with Apple and not made the same changes to their iCloud account/Find My Phone on their device before upgrading to iOS 7, or if you restore from a previous back up made before you changed your details and some other circumstances.
    The only solution is to change your Apple ID back to its previous state with Apple at My Apple ID using your current password, you don’t need access to this address if it’s previously been used with your Apple ID, once you have saved these details enter the password as requested on your device and then turn off "find my phone" and delete the account from your device. It may take a short while to remove the account.
    You should then change your Apple ID back to its current state, save it once again and then log back in using your current Apple ID. Finally, turn "find my phone" back on once again.
    This article provides more information about Activation Lock.

  • I am new with iMac and I am trying to copy some file from my external HDD but it does not let me also I can't delete anything from this HDD using the finder. Can somebody help me , please?

    I am new with iMac and I am trying to copy some file from my external HDD that a used with my PC but it does not let me also I can't delete anything from this HDD using the finder. Can somebody help me , please?

    No, unfortunately, when you format a drive, it will erase all the contents. So you will need to find a temporary "storage" place to put the stuff using a PC so you have access to it. Then reformat using Disk Utility (Applications > Utilities). If only using with mac, format Mac OS Extended (Journaled) and use GUID Partition scheme under Partitions/Options. After formatting, you can drag the files back.

  • How can i delete my icloud account but not the password to turn off the find my phone

    how can i delete my icloud account but not the password to turn off the find my phone setting

    Make sure you are signed into iMessage and FaceTime with your current ID.  If they are signed into the old ID, go to Settings>Messages>Send & Receive and Settings>FaceTime, tap the ID, sign out, then sign back in with your current ID.
    Then temporarily recreate the old ID by going to https://appleid.apple.com, click Manage my Apple ID and sign in with your current iCloud ID.  Click edit next to the primary email account, change it back to your old email address and save the change.  (You should not have to verify the old email account so it doesn’t matter if you no longer have access to it.)  Now go to Settings>iCloud, turn off Find My iPad and enter your current password when prompted (even though it prompts you for the password for your old ID).  Then save any photo stream photos that you wish to keep to your camera roll (unless using iCloud Photo Library).  When finished go to Settings>iCloud, tap Sign Out and choose Delete from My iPad when prompted (your iCloud data will still be in iCloud).  Next, go back to https://appleid.apple.com and change your primary email address back to the way it was.  Now you can go to Settings>iCloud and sign back in with your current iCloud ID and password (your data will download back to your device).

  • Can not delete file. Error is "Could not find this item".

    I get the following error when trying to delete a file:  "Item not found".  This is a Word 2007 document that would not save properly so I saved it with a different name.  Now I can't delete the original file.
    The body of the error states "Could not find this item.  This is no longer located in... . Verify the item's location and try again.

    Hi,
    I'm having exact the same problem with a file with a long name, to delete, move, rename, attribute change, etc. I deleted the file, which I receive the confirmation. However, the file is still there, with zero bytes and no extension. When I try
    to delet, move or change the file, I get the error "Could not find this item, This is no longer located in xxx. Verify the item's location and try again."
    I tryed everything: Using DOS, there's no 8.3 name format; In safe mode; chkdsk and sfc. Nothing worked.
    I also tryed the tricks in http://www.sevenforums.com/general-discussion/27924-could-not-find-item-when-deleting-files-3.html
    http://forums.techarena.in/vista-help/1038943.htm
    Without success.
    I took some more time and found this tool on the net "DelinvFile". It works perfectly, after trying EVERYTHING!!!.
    I Have Windows 7 professional 64bits and NTFS.
    Thank you very much.
    Thankyou Thankyou Thankyou Thankyou......... We are almost bald tearing our hair out over this issue and how to fix it.     Delin File WORKS...... At the cost of about 28 bucks well worth it.............. Good onya mate............

  • Trying to clean up my iMac.  Noticed that while in finder, I click on Applications and in the list I see another folder called applications that is a duplicator of the original folder.  Is this truly a copy that can be deleted?

    Trying to clean up my iMac.  Noticed that while in finder, I click on Applications and in the list I see another folder called applications that is a duplicator of the original folder.  Is this truly a copy that can be deleted?

    DO NOT remove either folder. DO NOT mess with any OS X system files either. If you have dupliocates check your files in iPhoto, iTunes and your iMovies libraries. Also check your data files, under ALL circumstances stay away from any OS X systems files or you will probably bork your Mac to the point it will not run.

  • I am trying to clean up my iMac hard drive and find a lot of space in 'Deleted Users'...what is this and can I delete that folder?

    I am trying to clean up my iMac hard drive and find a lot of space in a folder named 'Deleted Users'...what is this and can I delete it to save space?

    If a user account is deleted and the data for that account is not deleted, it is placed there. Yes, you can delete the files there.

Maybe you are looking for

  • ITunes Error (1645) When restoring

    Can someone help me please, im trying to restore to 4.1 officially and i am getting this error.

  • Printer profiles missing

    Lightroom 1.4 (and 1.3.1), PC, XP Pro SP2. When in Print mode in Lightroom, I select Color Management/Profile/Other, it only shows me the profiles down as far as Harman - it will not show the profiles for Ilford, or Permajet or any of the others furt

  • Avoiding inner joins????

    Hi all, I was just thinking of ways to improve the perfomance of my report. Its fetching data in to two different tables using two innerjoins and these two internal tables are again looped for some other manipulation. Can anyone tell me the ways i ca

  • Flickr - putting pictures in the order that I want

    I organize the pictures in the order that I want in iPhoto and then upload them to Flickr (pro account). When I go to my Flickr site, the pictures look like they're in the order that they were taken. Am I doign something wrong?

  • My ipad will not start up. The apple sign is just flashing in the middle of the screen

    Hello hope you can help. My iPad has just stopped running while on Facebook. It is just a blank screen with the apple logo flashing in the middle of the screen. It has been doing this for about an hour now!