<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
  PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
<meta name="copyright" content="(C) Copyright 2005"/>
<meta name="DC.rights.owner" content="(C) Copyright 2005"/>
<meta name="security" content="public"/>
<meta name="Robots" content="index,follow"/>
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="concept"/>
<meta name="DC.Title" content="Manual cleanup required"/>
<meta name="DC.Relation" scheme="URI" content="../concepts/Solving_problems.html"/>
<meta name="DC.Format" content="XHTML"/>
<meta name="DC.Identifier" content="concept_1544F06E9B794E0D9C2773E63A3A539F"/>
<meta name="DC.Language" content="en-us"/>
<link rel="stylesheet" type="text/css" href="../commonltr.css"/>
<link rel="stylesheet" type="text/css" href="../DITA.css"/>
<title>Manual cleanup required</title>
</head>
<body id="concept_1544F06E9B794E0D9C2773E63A3A539F"><a name="concept_1544F06E9B794E0D9C2773E63A3A539F"><!-- --></a>


  <h1 class="topictitle1">Manual cleanup required</h1>

  <div>
    <div class="section" id="concept_1544F06E9B794E0D9C2773E63A3A539F__section_D08F38C07BDA4B30952DC481358B7C38"><a name="concept_1544F06E9B794E0D9C2773E63A3A539F__section_D08F38C07BDA4B30952DC481358B7C38"><!-- --></a><h4 class="sectiontitle">Symptoms</h4>
      
      <p>A threat is displayed in Quarantine Manager with the available action “<span class="uicontrol">Clean up
          manually</span>”.</p>

    </div>

    <div class="section" id="concept_1544F06E9B794E0D9C2773E63A3A539F__section_903355046EB247DA8DAFCAA501B6C188"><a name="concept_1544F06E9B794E0D9C2773E63A3A539F__section_903355046EB247DA8DAFCAA501B6C188"><!-- --></a><h4 class="sectiontitle">Causes</h4>
      
      <p>This could be for one of the following reasons:</p>

      <a name="concept_1544F06E9B794E0D9C2773E63A3A539F__ul_5919F62B396B496BA8B06040C51B4610"><!-- --></a><ul id="concept_1544F06E9B794E0D9C2773E63A3A539F__ul_5919F62B396B496BA8B06040C51B4610">
        <li id="concept_1544F06E9B794E0D9C2773E63A3A539F__li_7346A23DE3C14C948F9374EC8F85E6E5"><a name="concept_1544F06E9B794E0D9C2773E63A3A539F__li_7346A23DE3C14C948F9374EC8F85E6E5"><!-- --></a><span class="keyword">Sophos Anti-Virus</span> does not have threat data to clean up the
          threat.</li>

        <li id="concept_1544F06E9B794E0D9C2773E63A3A539F__li_75D7BBFC39384F46B3BC64E14CD2C2D8"><a name="concept_1544F06E9B794E0D9C2773E63A3A539F__li_75D7BBFC39384F46B3BC64E14CD2C2D8"><!-- --></a>The threat is on a write-protected volume.</li>

      </ul>

    </div>

    <div class="section" id="concept_1544F06E9B794E0D9C2773E63A3A539F__section_20E0D341F7F744EBAB020AF4E1516AF0"><a name="concept_1544F06E9B794E0D9C2773E63A3A539F__section_20E0D341F7F744EBAB020AF4E1516AF0"><!-- --></a><h4 class="sectiontitle">Resolve the problem</h4>
      
      <p>Depending on the reason for the threat not being cleaned up, do one of the following:</p>

      <a name="concept_1544F06E9B794E0D9C2773E63A3A539F__ul_0E72447902664E4EAF7E7B182B8B97BF"><!-- --></a><ul id="concept_1544F06E9B794E0D9C2773E63A3A539F__ul_0E72447902664E4EAF7E7B182B8B97BF">
        <li id="concept_1544F06E9B794E0D9C2773E63A3A539F__li_90E1BF60F66641399F03169C8396A396"><a name="concept_1544F06E9B794E0D9C2773E63A3A539F__li_90E1BF60F66641399F03169C8396A396"><!-- --></a>If <span class="keyword">Sophos Anti-Virus</span> does not have threat data to clean up the threat,
          you must clean up the threat manually:<a name="concept_1544F06E9B794E0D9C2773E63A3A539F__ol_41238971-7959-4536-93c3-3986818adf09"><!-- --></a><ol id="concept_1544F06E9B794E0D9C2773E63A3A539F__ol_41238971-7959-4536-93c3-3986818adf09">
            <li>Add a new custom scan of the threats, as explained in <a href="../tasks/Add_a_custom_scan_of_a_threat.html#task_E32E187F16124D9C98841ED43A3B64E9">Add a custom scan of a threat</a>.</li>

            <li>Run the scan, as explained in <a href="../tasks/Run_a_named_scan_immediately.html#task_B22C3DC4BAD34C35B41719A87148B5EA">Run a custom scan</a>.</li>

          </ol>
<div class="important"><span class="importanttitle">Important:</span> Cleaning up a threat might not be able to undo all the actions
            the threat has taken on this Mac. For example, if the threat changed the value of a
            setting, the cleanup process might not know the original setting. You might have to
            verify the Mac’s configuration.</div>
</li>

        <li id="concept_1544F06E9B794E0D9C2773E63A3A539F__li_A05682780AAA4D3EBB056C0A54F08AEC"><a name="concept_1544F06E9B794E0D9C2773E63A3A539F__li_A05682780AAA4D3EBB056C0A54F08AEC"><!-- --></a>
          <p>If you can turn on write access to the volume:</p>

          <a name="concept_1544F06E9B794E0D9C2773E63A3A539F__ol_57c1f8fd-3b8d-43ff-ab74-7d6cad5dfb0b"><!-- --></a><ol id="concept_1544F06E9B794E0D9C2773E63A3A539F__ol_57c1f8fd-3b8d-43ff-ab74-7d6cad5dfb0b">
            <li>Clear the threat from Quarantine Manager (see <a href="../tasks/Clear_a_threat_from_QM.html#task_F5188D237C5D478D9419380CD8EAE6AE" title="">Clear a threat from Quarantine Manager</a>).</li>

            <li>Scan for the threat again.</li>

            <li>Turn on write access to the volume.</li>

            <li>Clean up the threat in Quarantine Manager (see <a href="../tasks/Deal_with_threats_in_QM.html#task_9D9C272DF3BD4B59B9C29A48C344E30C" title="">Deal with threats in Quarantine Manager</a>).</li>

          </ol>

        </li>

      </ul>

    </div>

  </div>

<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="../concepts/Solving_problems.html" title="">Solving problems</a></div>
</div>
</div>

</body>
</html>