The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
Important: This issue was fixed in VE 3.57.4 December 2014. In order to benefit from the fix, you must ensure that you are using the latest version of the engine.
You have one or more files with a $$$ file extension that are very large in one of the following locations:
C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Temp
First seen in Sophos Anti-Virus for Windows 2000+
These are temporary files that have been extracted by the scanning engine while scanning an archive file larger than 1MB and are normally removed when the scan has successfully completed.
If a scan has been forcibly terminated (not cancelled) through ending a Sophos process then the file(s) will remain and must be removed manually.
We are investigating this issue as DEF50386 to see if the files can be automatically cleaned up.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.