Sophos detected OSX/VSearch-A and OSX/VSearch-D, but cleanup fails...where do I go from here?

Question

Level 1

0 points

Sophos detected OSX/VSearch-A and OSX/VSearch-D, but cleanup fails...where do I go from here?

Hi,

A friend downloaded something to my computer from a file-sharing website, and Sophos Antivirus detected 2 threats, zero issues. They show up as OSX/VSearch-A and OSX/VSearch-D. I tried to "clean up threats" in Sophos' quarantine manager, but I jut get a message that says cleanup failed. What would a good course of action be?

I'll try to provide all the relevant information, but please let me know if there're any other details that might be useful.

Thanks!

Here are the details for OSX/VSearch-A...

Here's a continuation of the details for OSX/VSearch-A (at the bottom of the screenshot)...

And here they are for OSX/VSearch-D...

Finally, here's the icon that appeared on my desktop when the file downloaded..., along with a popup that told me to "double click here," which I x'ed out of. Let me know if there's any other info I should provide. Thanks!

MacBook Pro, OS X Mavericks (10.9.4)

Posted on Sep 23, 2014 4:01 PM

Reply

Answer 1

Top-ranking reply

Linc Davis

Level 10

209,667 points

Sep 23, 2014 5:25 PM in response to emiska

According to your screenshots, you didn't actually install the "VSearch" trojan; you just downloaded the installer. If that's really all you did, just unmount the image and delete the file you downloaded.

Reply

Answer 2

John Galt

Level 10

147,276 points

Sep 23, 2014 5:26 PM in response to emiska

If you x'd out of the installer, then you did not install the "Vsearch" adware and no harm has come from merely having downloaded it.

Drag the InstallOptimizer icon to the Trash to unmount it.
Drag the downloaded .dmg file to the Trash also.
Empty the Trash.
Use caution when an unsolicited popup spontaneously appears. For an explanation or how this may have occurred, how to avoid it in the future, and for one possible solution read How to install adware.

Reply

Answer 3

kahjot

Level 4

2,463 points

Sep 23, 2014 5:29 PM in response to emiska

In addition to other safeguards, how about not allowing that friend to use your computer again? Especially if he friend visits "file-sharing" sites.

Reply

Answer 4

emiska Author

Level 1

0 points

Sep 24, 2014 11:43 AM in response to emiska

Cool, thanks everyone! I did as advised and just put the items in the trash. Relieved that it's not something to stress about.

Reply

Answer 5

Sep 24, 2014 11:47 AM in response to kahjot

Or if you feel you must allow that "so called" friend on your Mac only give him access to the guest account. That way anything he downloads will be deleted as soon as he logs off.

Personally I recommend that you uninstall Sophos. It is worthless on a Mac.

Allan

Reply