The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
Note: This issue was fixed in Sophos Anti-Virus for Windows 2000+ 9.5.4
When installing Sophos Endpoint Security and Control and/or starting the Sophos Anti-Virus service you see the event log errors:
First seen in Sophos Anti-Virus for Windows 2000+ 9.0.5
Fixed in Sophos Anti-Virus for Windows 2000+ 9.5.4
Cause When the Sophos Anti-Virus service starts up it tries to expand certain environmental variables and is denied access.
NOTE: The issue described in this article only applies to Sophos Anti-Virus 9.5.3 and lower.
Add the 'Everyone' group to the root of the C:\ drive (or other system drive). The everyone group it is only required for the root of the drive and not all subfolders. Please see the screenshot below.
The requirement for the root of C:\ requiring Everyone group has been removed since Sophos Anti-Virus 9.5.4+.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.