"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
The Sophos Virus Removal Tool (SVRT) has found malware but is unable to clean it up.
First seen in Sophos Virus Removal Tool
Operating systems Windows
Note: The SVRT is a free tool and therefore support is only through our online community.
It is recommended you post your issue to the community. In order to provide the best reply you should include in your first post an extract of of the scan log, or attach the full scan log. The information you need to provide should show what malware name is recorded in the log and the full file path and name. The scan log is located in the following path:
C:\ProgramData\Sophos\Sophos Virus Removal Tool\Logs\SophosVirusRemovalTool.log
C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Virus Removal Tool\Logs\SophosVirusRemovalTool.log
Knowing where the file is located means you can take further action based on the reply received. For example the reply may suggest you submit the file(s) to SophosLabs as a sample for further analysis and/or improvement in cleanup. Or, due to the location you may need to delete the file manually and rescan the computer. If the malware is running in memory the SBAV tool may be suggested.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.