Currently Being ModeratedFeb 28, 2013 4:07 PM (in response to Stratiegery01)
My anti-virus software found a corrupt file within the TimeMachine backup, however the file is 'locked' due to TimeMachine control (ie. the file cannot be modified). How can I safely get rid of this?
Mackeeper is rubbish. Uninstall it immediately. It will cause you nothing but problems. What anti-virus software are you running?
Currently Being ModeratedMar 1, 2013 6:27 AM (in response to Stratiegery01)
You should under no circumstances allow any anti-virus software to scan, much less modify, your Time Machine backups! That's a good way to screw up your backups.
What did your anti-virus software say, specifically, about the file, and what file was it? We need exact details in order to be able to say anything useful, so copy the message and any information about the "malware" verbatim. Whatever was found is unlikely to actually be Mac malware. More likely, it's either a false positive or Windows malware. Once you know where the file is located, we can give you instructions on how to safely remove it from your backups, if that should actually prove to be necessary.
Note that, if you are using MacKeeper as your anti-virus software, it's actually using a fairly decent AV engine at this point (Avira). However, the rest of MacKeeper is worthless, and it will use scareware tactics to try to get you to purchase it, reporting thousands of "critical" issues that need fixing. The following, for example, is what MacKeeper reported in my testing on a clean install of Mac OS X 10.8.2, less than an hour old, with nothing installed other than MacKeeper:
Currently Being ModeratedMar 1, 2013 7:08 AM (in response to thomas_r.)
Absolutely agree with Petermac...
Remove it as soons as... !!!
Currently Being ModeratedMar 1, 2013 11:10 AM (in response to RáNdÓm GéÉzÁ)
I certainly agree with all of your that Mackeeper has worn out its welcome. I am less and less impressed with its overall capability, though having a few utilieties like shredder, smart uninstall, and application updater are convinient.
The file in question is a small-size .AVI file of a movie trailer from 2 years ago. Mackeeper says only that this file is "infected" and that my options are to quarantine or delete (from the software interface). It doesnt say anything specific about why this file is in question. As quarantining this file didnt work through Mackeeper (because the TimeMachine backup cannot be modified), I simply tried to locate and delete the file through the OSX finder window. Obviously this didnt work either, but it did confirm that the backup is locked which is why Mackeeper didnt fully work.
Assuming the Mackeeper antivirus is correct in identifying the infected file, the fact remains that I still need to remove this from the TimeMachine backup. How is this possible?
Currently Being ModeratedMar 1, 2013 11:35 AM (in response to Stratiegery01)
having a few utilieties like shredder, smart uninstall, and application updater are convinient.
The functions you mention are some of the most worthless. Shredder provides functionality that the Finder already provides. (Put something in the trash and choose Finder -> Secure Empty Trash.) The Smart Uninstaller is not really that smart, and those kinds of things are bad to rely on anyway. If something really needs an uninstaller, find the approved uninstaller provided by the developer. For most apps, that shouldn't be too hard to find. And the updater cannot keep track of all possible apps, plus most apps include some kind of self-updating capability these days.
The file in question is a small-size .AVI file of a movie trailer from 2 years ago.
If it's something you no longer need, might as well just get rid of it. But you should NEVER touch your Time Machine backups using the Finder. That can cause corruption of your backup. Instead, enter the Time Machine interface (choose Enter Time Machine from the Time Machine menu, or open the Time Machine app). Then remove the file from all backups there. For specific instructions, see the green box on the following page:
Currently Being ModeratedMar 2, 2013 12:46 PM (in response to thomas_r.)
Thomas A Reed wrote:
Shredder provides functionality that the Finder already provides. (Put something in the trash and choose Finder -> Secure Empty Trash.)
Actually Apple's finder does not provide the level of a 35-pass Gutmann secure delete like Shredder. Secure Empty Trash follows, or at least Apple claims, a 7-pass DoD compliant digital erase. Given the DoD's headlines this last year, a 7-pass isnt all that secure anyway. Not that a 35-pass option is necessary all the time, but I have my reasons for needing such a thing from time to time.
You did answer my question however. I simply didnt know that you could delete files from inside TimeMachine. This process may be a "permanent" delete from the backup, but lets just hope there are no remnants of whatever was originally infected left behind.