Ask Different is a question and answer site for power users of Apple hardware and software. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I was viewing another answer on this website and one of the links lead me to a malicious website. I have Sophos Antivirus installed, and a warning immediately popped up telling me that a threat was detected:

Threat: Mal/Badsrc-M
Path and Filename: /Users/USER/Library/Caches/Google/Chrome/Default/Cache/f_000e36
Action Available: The threat cannot be cleaned up. Please click the threat name above for manual cleanup instructions.

On the website, there are no instructions as to how to cleanup the threat. Even though this seems to be only a Windows virus, I still want it removed on my Mac so that it can't infect any other computers. Is it as simple as manually deleting the file listed above, or is there anything else I need to be worried about?

share|improve this question
The greater threat to your Mac is Sophos Antivirus. A windows program cannot run under OSX and so poses no threat. – amergin Jul 5 '14 at 23:52

Minus the fact that Sophos is just a giant waste of resources and space on your mac. The easiest way to clean it up would be to close chrome and go to that path in terminal and delete the file.

Open terminal and type the following:

rm -f /Users/USER/Library/Caches/Google/Chrome/Default/Cache/f_000e36 

That should delete the file forcibly.

Personal Note:

Having to run antivirus on your mac to protect windows machines is like wearing a helmet at your desk cause the guy on the bike outside might get hit by a car....

share|improve this answer
Your last sentence might look like an argument justifying to keep crapware on a Mac just because it doesn't risk anything immediatly. I don't feel comfortable with such an argument and its consequences. – daniel Azuelos Dec 23 '14 at 21:17

It seems that the steps Sophos wants you to take are found on this page:

  1. Open the Quarantine Manager.
  2. [...]
  3. If there are any threats for which the action available is 'Clean up manually', create a custom scan.
  4. Select the areas where the remaining threats reside and add these to the Scan Items.
  5. In the Options tab, select 'Delete threat' from the drop down menu.
  6. Click Done.
  7. Run the scan.

Tip: When choosing which folder to scan in step 4, I needed to navigate to the hidden Library folder in the Sophos dialog, which I couldn't do. So what I ended up doing was using Finder's Go > Go To Folder... menu option to first get to the folder, and then I created a shortcut to the cache folder in my Documents folder. Then when it asked me to select a folder to scan, I simply followed that shortcut I created.

share|improve this answer
When the Go menu is open, hold the option key. (Youre welcome.) – timothymh Mar 19 '12 at 4:55
@Timothy: Thanks for the suggestion, but unfortunately, that feature doesn't work in the dialog that Sophos uses. – Senseful Mar 19 '12 at 5:01
But you're in Finder, not a dialog box... – timothymh Mar 19 '12 at 5:08
@Timothy: When you follow the steps outlined above, you're in a dialog box in step 4. – Senseful Mar 19 '12 at 5:10
Oh, I see. I was replying to the "Tip:" at the end. – timothymh Mar 19 '12 at 5:17

You do it like this if you must. it is in google chrome cache buddy.

And then you find and remove

  • /Applications - any .app starting Sophos
  • /Library/Application Support/Sophos - entire folder (SAV 9 only)
  • /Library/Caches - all folders with com.sophos in name
  • /Library/Contextual Menu Items/Sophos Anti-Virus.plugin (SAV 8 only)
  • /Library/Extensions - all .kext files with Sophos in name
  • /Library/Frameworks/SAVI.framework & SUMScanKit.framework
  • /Library/LaunchAgents - all .plists with sophos in name
  • /Library/LaunchDaemons - all com.sophos plists
  • /Library/Sophos Anti-Virus - entire folder
  • /Library/usr/bin/sweep N.B. /Library/usr folder is invisible in the Finder.
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.