"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
Installation and configuration changes for Sophos Anti-Virus for Windows XP+ on a Remote Desktop Services server
First seen in Sophos Anti-Virus for Windows XP+
Operating system Windows 2003 Windows 2008 Windows 2012
Note: As of Windows Server 2012 Terminal Servers have been renamed to Remote Desktop Services Servers
Remote Desktop Services Servers can be deployed to using the protect computers wizard in the Sophos Console. There are no special considerations
2. Sophos AutoUpdate System Tray Icon It maybe desirable to disable the Sophos AutoUpdate shield icon is disabled on a Remote Desktop Services Servers (Citrix based environments may also benefit), this will save system memory in each user session.
Note: The updates will continue in the background without the shield icon present, but desktop messaging balloons from Sophos will be unavailable. You will also not be able to locally view any Update settings within the Sophos GUI while this option is enabled. You would continue to configure Update settings via the AutoUpdate policy within your Enterprise Console.
To disable the Sophos AutoUpdate shield do one of the following:
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.