"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
After installing Sophos Anti-Virus for Linux 9.6.1 messages similar to the following are shown in the syslog:
kernel: talpa-vetting: [intercepted 28220-28222-28222] failed to openDentry -13 - trying open of /var/log/mcelog kernel: talpa-vetting: [intercepted 28220-28222-28222] Open failed (-13), will have no stream
First seen in
Sophos Anti-Virus for Linux 9.6.1
These messages were due to some debug messages being inadvertently flagged as errors in the 9.6.1 release.
These messages can be safely ignored in version 9.6.1, the listed files are still being scanned.
We aim to resolve this in a subsequent version of talpa which will prevent these messages from being incorrectly logged. However it should be noted that the message "Open failed (-13), will have no stream" can still be legitimately seen if using a version other than 9.6.1.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.