"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
IssueA balloon message appears after an update showing that On-access is disabled. After an update on-access appears as enabled and there are no warnings shown against the Sophos Shield.
Known to apply to the following Sophos product(s) and version(s)
Sophos Anti-Virus for Windows 2000+ 9.5.5Sophos Endpoint Security and Control
Technical informationThis is by design and caused by the update process while on-access/SAV service is restarted. Sometimes the behaviour of balloon tips mean that the messages can remain on screen until there is some interaction with the session.
If Sophos on-access scanning is disabled permanently then a warning triangle is displayed in the notification area, this would be different to the above.
Refer to knowledgebase article 113287 for details of how to disable balloon tips.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.