"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
When opening the Patch Event Viewer within the Sophos Enterprise Console, either of the below statuses are seen:
Out of date
There are various reasons why these statuses can be displayed. This article will help you identify the reasons for this status and any actions that may be required.
First seen in Enterprise Console 5.0.0
Ensure the server's root certificates are fully up to date
Windows Security Updates will perform this action.
Confirm that the below folder exists and is populated with files
Windows 2003 - C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Endpoint Management\5.0\Updates\Secure\SDFs\SophosPA\PSRVR Windows Vista and above - C:\ProgramData\Sophos\Sophos Endpoint Management\5.0\Updates\Secure\SDFs\SophosPA\PSRVR
C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Endpoint Management\5.0\Updates\Secure\SDFs\SophosPA\PSRVR
C:\ProgramData\Sophos\Sophos Endpoint Management\5.0\Updates\Secure\SDFs\SophosPA\PSRVR
If this folder does not exist or has not been populated, you may not be licensed for Patch Assessment with your current credentials.
The PatchDataLoader.exe process performs the file download. In the Windows Task Manager, confirm that the PatchDataLoader.exe process is running. If not active, then run the Sophos Patch Feed scheduled task manually to start it
Sophos Patch Feed
Windows Vista and above
Check again in Windows Task Manager, if the PatchDataLoader.exe process is not running then please contact Sophos support.
To confirm that files are downloading successfully, check to see if the following directory becomes populated with folders containing files with PLS extension:
C:\Documents and Settings\All Users\Application Data\Sophos\Patch\ThirdParty\Windows
C:\Documents and Settings\All Users\Application Data\Sophos\Patch\PatchDataLoader\Download\Pls
If files are downloading successfully then wait for the download to complete. This may take a significant time due to the number of files which need to be downloaded, up to around 3 hours depending on the download connection.
If files are not downloading successfully then please contact Sophos support.
Check the PatchDataLoader.log to see if there are any connection or download errors. If there are errors which are repeated on every download then please contact Sophos support.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.