
Delete the file by right-clicking on it -> Move to trash. Users/Username/Library/Mail/V7/99F4E063-CDE3-40C2-AC1A-0B85E37E6CAD/Recovered Messages paste it in Spotlight (click on the Magnifying glass at the top right of your screen) Highlight and copy the path up-to the threat's name - In this example:
Log in to your Sophos Home Dashboard , locate the affected system and use the HISTORY tab to find the detection and its full path, copy the path up until the threat's name (do not include the threat's name), then paste it on Spotlight (click on the magnifying glass at the top right -> paste the path and hit Enter to open the location in finder). Click on the path to open it in finder *(please see Note at the bottom if the path doesn't open in Finder). Click on the Manual detection via the Sophos Home Shield and hover the mouse over the threat's name to see its full path. Find the location of the detected threat through any of the following options:. Detection example: (Note the location including /Library/Mail, as well as the example threat name at the end) If the file path presented includes /Library/Mail/ then the malware is most likely contained inside an email attachment. On the Sophos Home Dashboard find the manual clean up detection and choose Ignore. Right-click on the offending file and choose Delete All Backups of (Repeat this step for any other Time Machine offending items). Click on HISTORY and locate the detection that requires manual clean up, it will show the full path, including file name, location and date. For example, /Volumes//Backups.backupdb// YYYY-MM-DD-NNNNNN//. Log in to your Sophos Home Dashboard and locate the affected system, click on it. Option 2 - Removing a Time Machine threat via the Sophos Home Dashboard
On the Sophos Home Shield find the manual clean up detection and hit Ignore.Right click on the offending file and choose Delete All Backups of (Repeat this step for any other Time Machine offending items).Enter Time Machine on your Mac and navigate to the day/time that matches the threat, then locate the file.Volumes//Backups.backupdb// YYYY-MM-DD-NNNNNN//. Take note of the date/time and file name, for example:.Hover the mouse over the path to see its entirety.
Click on the Manual detection on the Sophos Home Shield.Option 1 - Removing a Time Machine threat using the Sophos Home Shield