Thanks Ronni Only disc shown in the finder is “Remote Disc” with no eject icon Terminal shows:- Barrys-iMac:Volumes BJS$ ls -la total 8 drwxr-xr-x@ 3 root wheel 102 23 Nov 16:04 . drwxr-xr-x 46 root wheel 1632 23 Nov 15:22 .. lrwxr-xr-x 1 root wheel 1 23 Nov 15:21 Macintosh HD -> / Barrys-iMac:Volumes BJS$ so it appears I may have ejected the install disk. I will do a full scan with Sophos and see if it still reports a potential threat. I will report back when the scan is complete.
Thanks Barry > On 23 Nov 2017, at 4:18 pm, Ronda Brown <[email protected]> wrote: > > Hi Barry, > > When you open the 'Finder' application - in the sidebar there is probably an > install disk that you can eject (has an eject icon next to the name). > > You can also open the 'Terminal' program and type in cd /Volumes/ and then ls > -la. This gives you a listing of what is in that directory. If it's not in > there, you have probably already ejected the install disk. > > Cheers, > > Ronni > > > Ronni Brown’s iPad Pro 12.9-inch 256GB > > > On 23 Nov 2017, at 3:24 pm, Barry Sexstone <[email protected] > <mailto:[email protected]>> wrote: > >> Sophos has detected a threat on my iMac running Sierra and has given the >> following report >> Manual PUA cleanup required: 'Bundlore' at >> '/Volumes/Install/Install.app/Contents/MacOS/appleinstaller’ >> >> I have searched Sophos help and tried the suggested but with no success. I >> have also run Malwarebytes which reports my system clean. >> >> Any advice? >> >> Barry >> >> >> iMac Retina 5K 27" >> Intel Core i5 3.5 GHz >> 8 GB RAM >> 1.0 TB HD >> OS X 10.12.6 >> > -- The WA Macintosh User Group Mailing List -- > Archives - <http://www.wamug.org.au/mailinglist/archives.shtml> > Guidelines - <http://www.wamug.org.au/mailinglist/guidelines.shtml> > Settings & Unsubscribe - > <http://lists.wamug.org.au/listinfo/wamug.org.au-wamug>
-- The WA Macintosh User Group Mailing List -- Archives - <http://www.wamug.org.au/mailinglist/archives.shtml> Guidelines - <http://www.wamug.org.au/mailinglist/guidelines.shtml> Settings & Unsubscribe - <http://lists.wamug.org.au/listinfo/wamug.org.au-wamug>

