We are using Sophos Clean to check a sampling of end-points in our environment and a number of them are detecting au.exe and completing the removal process with a restart does not remove. Other AV products have not detected and general searches for au.exe have not provided meaningful information. Is this a false positive? Thanks for the help.
Hi Julie S,
Will it be possible for you to locate the file and have it submitted to Sophos labs for further investigation or Can you help me with the Hash value of the file so that I can cross check if we already any details on this file.
Gowtham ManiCommunity Support Engineer | Sophos Technical Support Knowledge Base | @SophosSupport | Sign up for SMS AlertsIf a post solves your question use the 'This helped me' link.