"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
This is the executable for the Sophos agent.
Location: C:\Program Files\Sophos\Remote Management System\
There is an adapter for each component on the client that uses RMS. They are located in:
C:\Program Files (x86)\Sophos\AutoUpdate\AUAdapter.dll
C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdapter.dll
C:\Program Files\Sophos\Sophos Client Firewall\SCFAdapter.dll
C:\Program Files\Sophos\Sophos Patch Agent\SpaRmsAdapter.dll
C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll
HKLM\SOFTWARE\Sophos\Remote Management System\ManagementAgent\Adapters
When the Sophos Agent starts, it discovers the location of the adapters from this part of the registry.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.