This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

PrintIsolationHost flagged as ransomware

I had several PC's this week give this error: CryptoGuard detected ransomware in C:\Windows\System32\PrintIsolationHost.exe But, I don't think it is correct.

This thread was automatically locked due to age.

Rincewind over 8 years ago
We will need the following sent to us:-

File output from Sophos Diagnostic Utility ( you find this from the program files menu )

Zip'd collection of log files from C:\ProgramData\Sophos\Clean\Logs and C:\ProgramData\HitmanPro.Alert\Logs

You can use https://www.wetransfer.com/ for free to send us the file. Suggest you zip them all together and use a password. Please send the details to me via the forum messaging.
Cancel
Vote Up 0 Vote Down

Cancel
MattLithcfield over 8 years ago in reply to Rincewind

// EDIT to remove email addresses - reduce spam risk :) //

I sent the logs via WeTransfer... to: JG from: Matt

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel
MattLithcfield over 8 years ago in reply to Rincewind

Download link: https://we.tl/WRROQMG643
Cancel
Vote Up 0 Vote Down

Cancel
Rincewind over 8 years ago in reply to MattLithcfield

Got it. We will take a look at the logs.

JG
Cancel
Vote Up 0 Vote Down

Cancel
HelpDesk9 over 8 years ago

Any update on this ticket? I received a similar alert for PrintIsolationHost.exe and wondering if its a false positive.

Thank you,
Cancel
Vote Up 0 Vote Down

Cancel
Rincewind over 8 years ago in reply to HelpDesk9

We're sending out an updated version to all beta customers. Please let us know if you are still seeing this.

jG
Cancel
Vote Up 0 Vote Down

Cancel