Post by: Bbob on November 04, 2010, 07:14:31 PM
http://www.sophos.com/products/free-tools/...virus/download/
Anyone use it or know anything about it? Is appears to be free, but I am always somewhat leery of freebies.
Here's info from the Sophos web site:
Sophos Anti-Virus for Mac: Home Edition is software that detects and deals with threats (viruses,
worms, and Trojans) on your Mac. As well as being able to detect Mac OS X threats, it can also
detect Windows threats that might be stored on your Mac and transferred to Windows computers.
Sophos Anti-Virus is preconfigured with the recommended settings for protection.We recommend
that you don’t make changes to the settings unless there is a specific need or problem that you are
aiming to address.
Post by: Paddy on November 05, 2010, 12:51:45 AM
At this point, I don't want nor see the need for anything that runs constantly in the background on a Mac like the Sophos AV. If any real threats come along, I may change my tune, but until then, I will continue on as I have for the past 10 years.
BTW Bob, I have changed your link as you had linked directly to the download itself, and it starts downloading if you click on that link.
Post by: krissel on November 05, 2010, 02:36:57 AM
QUOTE
Advice: experiencing slow-down when scanning?
We have seen a small number of reports online of Sophos Anti-Virus for Mac Home Edition causing system slowdowns when manually scanning local drives.
We are taking these reports very seriously and are working around the clock to resolve the issue. We're sorry for this inconvenience.
To avoid the problem, you can rely on Sophos Anti-Virus automatic on-access scanning. When Sophos Anti-Virus for Mac Home Edition is installed, the on-access protection feature is enabled automatically. On-access scanning is running when the Sophos shield in your title bar is black. There is no need to run a manual scan.
Sophos's on-access scanning means that every file you access is invisibly scanned, and any malware threats will be intercepted without you needing to do anything. Your Mac is fully protected against threats automatically.
Please check back to this forum for updates on this issue. Thanks!
We have seen a small number of reports online of Sophos Anti-Virus for Mac Home Edition causing system slowdowns when manually scanning local drives.
We are taking these reports very seriously and are working around the clock to resolve the issue. We're sorry for this inconvenience.
To avoid the problem, you can rely on Sophos Anti-Virus automatic on-access scanning. When Sophos Anti-Virus for Mac Home Edition is installed, the on-access protection feature is enabled automatically. On-access scanning is running when the Sophos shield in your title bar is black. There is no need to run a manual scan.
Sophos's on-access scanning means that every file you access is invisibly scanned, and any malware threats will be intercepted without you needing to do anything. Your Mac is fully protected against threats automatically.
Please check back to this forum for updates on this issue. Thanks!
Might be interesting to follow the threads on this software at their forum. Already there are complaints about slowdowns and freezes.
Why is it free?
QUOTE
The reason for providing this for free is because we think Macs are beautiful machines and we want to keep them that way. As Apple market share grows there is a growing concern that the number of malicious attacks against the Mac platform will increase. Historically, Mac users are less likely to run anti-virus / anti-malware software making Mac users a soft target. We want to help Mac users increase their security hence offering this software for free.
We know that Mac malware already exisits and these can attack Mac systems to steal data or compromise systems. As the majority of malware still targets Windows, there is not the same range of high performance consumer anti-virus software available in the market. Sophos provides high quality protection for businesses, and all business users are also consumers. Therefore helping them to protect their Macs at home will also help protect their business machines. We think offering free, industrial-strength protection to consumers will help them be ready for any future mac-specific cyber-attack.
This software is backed by the same high quality threat detection as our business-class software - so will detect, clean-up and quarantine to the same standards, it is not watered it down. However this is restricted just for home use.
We have not set a time-limit on this software and our intention is to continue providing best protection updates to users on this software version.
We know that Mac malware already exisits and these can attack Mac systems to steal data or compromise systems. As the majority of malware still targets Windows, there is not the same range of high performance consumer anti-virus software available in the market. Sophos provides high quality protection for businesses, and all business users are also consumers. Therefore helping them to protect their Macs at home will also help protect their business machines. We think offering free, industrial-strength protection to consumers will help them be ready for any future mac-specific cyber-attack.
This software is backed by the same high quality threat detection as our business-class software - so will detect, clean-up and quarantine to the same standards, it is not watered it down. However this is restricted just for home use.
We have not set a time-limit on this software and our intention is to continue providing best protection updates to users on this software version.
Umm, yeah, sure. As for "this" software version, when Lion comes out this version will not work and those who now believe they "need" this will pay for the Lion version. (My speculation, of course.)
http://openforum.sophos.com/t5/Sophos-Anti.../FTT_MAC_MAGNET
Post by: jchuzi on November 05, 2010, 05:27:21 AM
Post by: krissel on November 06, 2010, 02:13:31 AM
Post by: gunug on November 06, 2010, 02:56:27 AM
Post by: Xairbusdriver on November 06, 2010, 08:36:42 AM
While I appreciate these AV companies issuing warnings, and they must create some income if they are to continue that, I would rather use software that is not what creates that income.
Secondarily, the current software may not be of much use if/when a new malware is born since it may not have any kind of "signature" that is recognizable. That obviously creates an opportunity to charge for an update, sooner or later.
ClamXav is already free, so the developer(s) have no incentive to boast of finding new problems that are purely lab experiments. The app has been updated three times this year. As far as I can see, the virus definitions are updated daily, as needed. Someday, it may become a paid product. It certainly is worth paying for and I think they still accept donations.
I just like support the "little guys." Especially those who don't have dull axes! 
If you don't even want to use ClamXav, SecureMac has a 'one-trick-pony' that searches for the Boonana trojan. <http://www.securemac.com/> Look for an entry dated 10.28.10. The download link is there entitled "Boonana Trojan Horse Removal Tool."
Post by: Johanbgoot on November 07, 2010, 01:52:07 PM
Hope this is helpful.
Johan
Post by: Xairbusdriver on November 07, 2010, 03:36:04 PM
QUOTE
Apparently it runs in the background
That's been the biggest complaint...everything that runs, slows everything else down a little or a lot, depending on how well it is programmed. I'm sure it can also be run at the users discretion, similar to ClamXav (which also updates its definitions list whenever it runs, with your permission, of course). BTW, ClamXav has been around since Sep, 2004. 
How long has Sphos been programming for the Mac? 
Post by: Johanbgoot on November 08, 2010, 07:00:07 AM
Post by: gunug on November 08, 2010, 08:03:53 AM
Post by: Paddy on November 08, 2010, 11:04:49 AM
QUOTE
I just let it go and it didn't find anything!
Of course it didn't. There's very little to find out there in the wild - and nothing (other than a Trojan or two) that actually infect Macs. Sophos is trying to create a need by scaring people into believing they need AV software running in the background at all times on a Mac. That and creating the illusion that they're doing this because "they love Macs". If you believe that's their reason, I've a lovely bridge for sale...
What I find particularly amusing is the assumption that as Macs become more mainstream, of course there will be more malware aimed at them. (The old security by obscurity argument) Of course, as Macs become more mainstream, the platform become much more attractive to those trying to market AV software, whether there is any real need for it or not. It's no doubt a particularly easy sell to those moving over from the Windows world.
Cynical? Moi?
Post by: gunug on November 10, 2010, 08:41:51 AM
QUOTE
Did Sophos Free A-V for Mac kill my Time Machine backups?
The title isn’t merely rhetorical; I really want to know. I hope by this blog post to begin a conversation with folks from Sophos and those who know more about the inner workings of Time Machine. My backups are gone — 19 months of irreplaceable data — but perhaps this post and the ensuing conversation can spare others from similar trouble.
First, of course, I should have had a backup of my 500-GB Time Capsule. It’s been in the back of my mind for months to go out and acquire a suitable disk and get that essential job done. So, before we get started, let me just say: mea culpa.
I downloaded and installed Sophos Anti-Virus for Mac Home Edition as soon as I heard about it, on Nov. 3. As a long-time Mac user I’ve been following the debate about whether or when the Mac platform would be targeted at a level that makes A-V protection prudent. My personal conclusion: by the time the Mac’s market share approaches 20%, we will be embroiled in the same battle that has swirled around PC users for a decade. Now that (by some estimates) the Mac has broken the 10% barrier, I was prepared for the first sounds of distant battle trumpets.
http://recoveringphysicist.com/17/did-soph...machine-backups
The title isn’t merely rhetorical; I really want to know. I hope by this blog post to begin a conversation with folks from Sophos and those who know more about the inner workings of Time Machine. My backups are gone — 19 months of irreplaceable data — but perhaps this post and the ensuing conversation can spare others from similar trouble.
First, of course, I should have had a backup of my 500-GB Time Capsule. It’s been in the back of my mind for months to go out and acquire a suitable disk and get that essential job done. So, before we get started, let me just say: mea culpa.
I downloaded and installed Sophos Anti-Virus for Mac Home Edition as soon as I heard about it, on Nov. 3. As a long-time Mac user I’ve been following the debate about whether or when the Mac platform would be targeted at a level that makes A-V protection prudent. My personal conclusion: by the time the Mac’s market share approaches 20%, we will be embroiled in the same battle that has swirled around PC users for a decade. Now that (by some estimates) the Mac has broken the 10% barrier, I was prepared for the first sounds of distant battle trumpets.
http://recoveringphysicist.com/17/did-soph...machine-backups
Post by: Xairbusdriver on November 10, 2010, 11:04:38 AM
Post by: kimmer on November 10, 2010, 01:22:19 PM
QUOTE(gunug @ Nov 10 2010, 06:41 AM) <{POST_SNAPBACK}>
And maybe, although I don't use "Time Machine" it might kill my backups if I were making them using Time Machine:
QUOTE
Did Sophos Free A-V for Mac kill my Time Machine backups?
http://recoveringphysicist.com/17/did-soph...machine-backups
http://recoveringphysicist.com/17/did-soph...machine-backups
He's updated his blog, and has posted more information that is relevant. One thing that stood out to me is this comment -- and the bolding is mine.
QUOTE
Sophos went spinning pizza of death — after a couple of minutes I issued a three-finger salute and terminated the hung process. As some point here I probably stopped the Time Machine backup as well, without resorting to undue force.
I do think that stopping TM improperly could be part of the prob -- but I can't prove that, just my opinion for what it's worth.
I do have ClamVX installed and I do run it now and then. The first run through it found 2 really, really, really old files in my TB email archives. Both were attachments brought over when I moved from my old G4 to this iMac and the date was 2000 and 2002. They were both from pals and I hadn't opened them because they were exe files. I'd kept the emails because they had personal notes. Anyhow, I had ClamVX dump the files and since then it hasn't found anything. I run it once a month for drill. I need something to do on the 7th Sat of each month.
Post by: Xairbusdriver on November 10, 2010, 02:50:18 PM
More concerning to me is why anyone would not use Time Machine, assuming they had an extra drive to use with it. While a daily Super Duper backup is great, since you can boot from it, it will not have anything on it that you may have created and trashed in the last 24 hours. That's really where TM shines, you have to create a delete something within an hour before it would not make it to the backup. As has been said many times, these are two different types of backups and they compliment each other very nicely, and TM is already installed!
But the same can be said for this Sophos app and ClamXav. The Sophos app is similar to TM in that it runs all the time and that allows it to fine malware even while it may be downloading. ClamXav is more like SD; here's the state of your machine at this particular time; perhaps after you have allowed something to be installed by giving you password to the OS without using your brain!!!
Of course, my argument about being up-to-date still stands, neither app will find anything it doesn't "know" about. At the end of the day, the protection level is only as strong as the weakest link...the human link!
Post by: Xairbusdriver on November 10, 2010, 04:52:37 PM
Pictures at 10!
Post by: gunug on November 10, 2010, 06:01:16 PM
QUOTE
Pictures at 10!
I think I've seen pictures of you in church; strangely enough!
Post by: Paddy on November 10, 2010, 08:42:48 PM
QUOTE(Xairbusdriver @ Nov 10 2010, 06:52 PM) <{POST_SNAPBACK}>
I downloaded the free Sophos app.
Ok...I'll bite. Why?
Or do you need something to do on the 9th of the month? Trouble is, it's there now and runs in the background. Again...WHY bother? If it ain't broke...
(I assume, Kim, that you meant the 7th day, not the 7th Saturday - or maybe you DID mean the 7th Saturday of the month, in which case you intend never to run Clam!
)
Post by: kimmer on November 11, 2010, 02:35:26 AM
QUOTE(Paddy @ Nov 10 2010, 06:42 PM) <{POST_SNAPBACK}>
(I assume, Kim, that you meant the 7th day, not the 7th Saturday - or maybe you DID mean the 7th Saturday of the month, in which case you intend never to run Clam! )
)No, that was just a smart a$$ remark meaning I run Clam when I'm bored and need something to do.
Post by: Xairbusdriver on November 11, 2010, 09:52:54 AM
So far, I can't see/feel anything different but it's hard to count in milloseconds!
Activity Monitor show three processes with "Sophos" in their name. Two are running as root, the other one with my admin. Each has four threads. None are using enough cycles to show anything except "0.0%" I'll try to remember to watch when I download something or check mail...
Post by: Johanbgoot on November 11, 2010, 10:34:37 AM
Post by: Paddy on November 11, 2010, 04:30:02 PM
QUOTE
I turn on the drives and run Time Machine at the end of the day on my iMac and my wife's Macbook and then turn off the external drives.
You do realize, Johan, that this pretty much defeats the purpose of Time Machine, which is to provide constant backups (once an hour) so that you have previous versions of things should you wish to revert etc.? The TM backups are not bootable.
With your pattern of once a day backups, you might be better served by SuperDuper, which does give you a bootable backup. No previous versions of course, but you're losing a lot of yours right now. Food for thought, perhaps.
Post by: Johanbgoot on November 12, 2010, 08:17:49 AM
I have no qualms about leaving my external drive on if it serves a purpose, but does it? I do have Super Duper should I really use it instead?
Please let me know folks what you think.
Johan
Post by: Xairbusdriver on November 12, 2010, 10:25:27 AM
But you did ask...The way you are using TM and SD has only one big difference: You will still have daily back-ups via TM until the time comes when they are converted into weekly back-ups, and then monthly. The SD back-ups are completely replace each day or whenever they are made.
TM is a historical back-up with ever expanding time periods; hourly, daily, weekly and monthly. They will consume as much space as you let them have.
SD back-ups are a snap shot of your hard drive at the moment the back-up is made, but it can be bootable. The size remains relatively the same. If you use the Smart Back-up method, you should be able to keep at least one version of older files at the slight cost of increasing back-up size (but only a very small fraction of a TM back-up).
Both these apps can be run manually, if you like that sort of thing. Personally, I think that is one reason we have computers; let them do the common, redundant, boring, detailed stuff. Let apps run on a schedule that's easiest for me. For SD, that means automatically starting up just before I usually turn the Mac off. For TM, I don't bother it, except to retrieve stuff, it runs as long as the Mac does. I'm not convinced that turning an electronic device (be it a light bulb, hard drive or the Space Shuttle) ON/off/ON/off/ON/off... is any better for it than letting it run almost continuously.
Of course, we are not locked in to any particular method of backing up. JUST DO IT!
Post by: Jack W on November 12, 2010, 10:26:36 AM
I'm with you.
If you have SD! clones and daily TM backups, I think that is good coverage.
I wouldn't mind at all if TM only kept 1/Mo on data older than 2-3 months.
Because, by the time TM backups are that old, who can remember individual files, and when they were created?
I do SD! backups at least once a day or two, and TM 1-3 per day.
Jack
Post by: Xairbusdriver on November 12, 2010, 01:21:37 PM
Actually, each hours back-up takes very, very little space. It only has what has changed in the last hour. Although it will display the entire disk (or whatever you've asked it to back-up), it is all done with smoke, mirrors and a little software. Basically, all the previously backed-up stuff is elsewhere on the disk. What you see is similar to a bunch of aliases. If you haven't created anything in the last hour, the new "back-up" is basically just another file pointing to the same ones that were on the previous one. Quite efficient use of hard drive space, actually. It's not simply another complete copy of what's on the drive at back-up time.
SD, on the other hand, has the advantage of being bootable (in case you can't find your install disks). But if you select the first two types of back-ups (During copy), you will lose any files that were on the old one but not on the drive at back-up time. And the last two choices will over-write any previous file that has changed. It's not what I would call a "historical" back-up. It may go back quite some time for a particular file that hasn't been changed since it was first saved, but any others will either be over-written with the change or simply deleted. It's more like a "snapshot" of your drive at a moment in time.
So far, we have a choice as to how we use these two different methods. But, in all fairness and honesty, everyone should do everything as I dew!
Or, at least like Steve says! 