"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
Enterprise Console reports the following error for the affected endpoint computer:
a0490001 Failed to connect to the on-access driver (0x80070002)
The following issues will also be seen on the affected endpoint computer:
Failed to connect to the on-access driver (0x80070002)
Failed to initialize the on-access Group Security Descriptor
First seen in Enterprise ConsoleSophos Endpoint Security and Control
Various - different solutions listed below.
Note: Before you make any changes to the registry, ensure that you read the warning about editing the registry.
To recreated the SAV driver files correctly you must first uninstall the Sophos Anti-Virus component and then re-install.
Note: Do not simply re-install over the top of the current installation. A reboot after removal is recommended.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.