"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
The Sophos Virus Removal Tool is able to identify and remove malware from a single Windows endpoint computer (Windows XP SP2 and above, for Macs see Mac Home Edition). The tool comes with the latest identities included, to stay current with the latest detections the tool should be downloaded again when a new scan is required.
This article provides an overview of the tool. As it is a free tool, post any questions to our community as there is no phone or email support. If you would like to see more information added to the article please use the feedback box at the bottom of the article.
Applies to the following Sophos product(s) and version(s) Sophos Virus Removal Tool
Operating systems Windows XP SP2 and above.
The tool is available to both Sophos and non-Sophos customers alike.
Sophos customers are strongly advised to use the latest version of Sophos Anti-Virus in preference to this tool. The Sophos Virus Removal Tool offers no additional detection ability over that of Sophos Anti-Virus version 10. A managed installation of Sophos Anti-Virus however, offers additional benefits like real time scanning and central management.
If you need any assistance with using this tool post your question to the free tools forum.
The tool is a self contained on-demand malware scanner with the following features:
Note: It does not have an on-access scanner (i.e., the ability to scan files real time). Updating is only available in the 2.2 version of the tool.
You can download the tool from the link below.
Download: Virus Removal Tool - Free virus detection and removal.
This tool is only available for Windows:
The tool can be used in two ways:
1. Running via the GUI
2. Running from the Command Line
Note: We recommend whenever possible you use the graphical version of the tool.
The command line tool can be found in the following folder:
C:\Program Files\Sophos\Sophos Virus Removal Tool\SVRTcli.exe
C:\Program Files (x86)\Sophos\Sophos Virus Removal Tool\SVRTcli.exe
There are several command line options that can be passed to the command line tool. These are:
Note: If you need any assistance with using this tool you must post your question to the free tool forum. If you are a licensed Sophos customer you are welcome to use the tool (though we recommend you use Sophos Anti-Virus or SAV32CLI). However all support requests should be posted on the same free tool forum as non-Sophos customers.
When posting to the forum you may want to include the log of the scan, or an extract. The log is available from:
C:\ProgramData\Sophos\Sophos Virus Removal Tool\Logs\SophosVirusRemovalTool.log
C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Virus Removal Tool\Logs\SophosVirusRemovalTool.log
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.