"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
Device Control policy continues to be enforced after the user has removed Sophos Anti-Virus for Mac OS X
First seen in Sophos Anti-Virus for Mac OS X
Removing Sophos Anti-Virus for Mac OS X using a Third Party removal tool rather than using the built in Uninstaller, 'Remove Sophos Anti-Virus.app', can cause kernel changes made by the Device Control feature to not be reversed.
To resolve this issue it is advised that users re-install Sophos Anti-Virus for Mac OS X, and then uninstall using the built in uninstaller, 'Remove Sophos Anti-Virus.app' which can be found in /Library/Sophos Anti-Virus/. Removing Sophos Anti-Virus for Mac OS X with the correct uninstaller will correctly reverse any kernel changes made by the Device Control feature.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.