Hello. On some sophos endpoints the following error appears "Manual malware cleanup required: 'Unknown Threat' at 'null'".
Could you tell me what this error refers to or how to solve it?
The version in which this error appears is
CoreAgent 2023.1.3.5
Sophos Intercept X 2023.1.1.7
Endpoint Protection 10.8.11.4
XDR 2023.1.3.5
Hi Antonio,
Thanks for reaching out to the Sophos Community Forum.
Could you try checking the "Sophos Clean" logs at "C:\ProgramData\Sophos\Clean\Logs"?
I suspect the detected item may be within a volume shadow copy location. The following articles may help as well.
- Set scanning exclusion for Volume Shadow Copies
- Resolve malware detection on pagefile.sys or hiberfil.sys
Hi Antonio,
Thanks for reaching out to the Sophos Community Forum.
Could you try checking the "Sophos Clean" logs at "C:\ProgramData\Sophos\Clean\Logs"?
I suspect the detected item may be within a volume shadow copy location. The following articles may help as well.
- Set scanning exclusion for Volume Shadow Copies
- Resolve malware detection on pagefile.sys or hiberfil.sys
