"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
Sophos Anti-Virus for vShield Secure Virtual Machines (SVMs) deployed using the version 1.0 deployment tool may not be listed in the version 1.1 removal tool.
First seen in Sophos Anti-Virus for VMware vShield
SVMs deployed using the version 1.0 deployment tool that contain unicode characters in their names are unable to be displayed in the version 1.1 removal tool.
The Sophos Anti-Virus for vShield v1.1 deployment tool is unable to list currently deployed SSVMs if there names contain unicode characters.
For example it is possible with the Sophos Anti-Virus for vShield v1.0 deployment tool to deploy an SSVM called 'svm_v2_eng_الإسكندينافي'. However, the Sophos Anti-Virus for vShield v1.1 deployment tool is unable to list this SSVM when selecting the ESXi host it is on.
To successfully remove this SSVM customers will need to use the SSVM removal method provided with the Sophos Anti-Virus for vShield v1.0 deployment tool. Instructions on how to remove the v1.0 SSVM can be found under section 15 in the following manual:
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.