Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 14 subscribers
  • Views 2843 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

CryptoGuard detected ransomware in C:\Program Files\Sophos\Endpoint Defense\SophosCleanup.exe

Lim Woei Kang

Dear All,

im facing CrytoGuard detected on sophoscleanup.exe

CryptoGuard detected ransomware in C:\Program Files\Sophos\Endpoint Defense\SophosCleanup.exe

anyone encountered this issue before?



This thread was automatically locked due to age.
  • 0

    Hi Lim Woei Kang,

    Thanks for reaching out to the Sophos Community Forum. 

    If you are looking for an immediate workaround, I'd suggest deploying the hotfix package for Intercept X.
    -  Sophos Exploit Prevention cumulative hotfix

    If you would like to look into why this issue occurred, try checking the details on the detection event. You can also find this information in the Windows Application Event Log by filtering for Event ID 911.

    It is quite strange that SophosCleanup.exe would be detected, so you may also want to raise a support case regarding this issue. If you do choose to go that route, please send me a private message with the case ID so I may inquire further. 

    Kushal Lakhan
    Team Lead, Global Community Support
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  - Visit Sophos Techvids
Unfiltered HTML