Sophos Anti-Virus: excluded folder included in scheduled scan after detection by memory or registry scan
With Sophos Anti-Virus an excluded folder is scanned by a scheduled scan after a potentially unwanted application (PUA), or multi-component malware, has been detected in a memory/registry scan.
This is as designed.
Technical details
If the Sophos Anti-Virus engine detects a virus, or other unwanted software, it traces and attempts to clean up all components of that software. This is done without reference to the Sophos Anti-Virus folder exclusions settings.
So, if malware is detected in memory, or in the registry, the Sophos Anti-Virus engine will clean up all files related to that malware, even if they are in a folder excluded from scheduled and immediate scans. This is because in order to clean up the infection, all components must be removed. A scheduled or immediate scan run on the computer will not detect any other malware in that folder, unless the scan is configured to scan it.
If you need more information or guidance, then please contact technical support.
- Article ID: 14675
- Created: 22 Mar 2006
- Last updated: 20 Jul 2007
