"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
This article explains how to use SGNRollback.exe to repair a failed SafeGuard Enterprise installation.
Apply to the following Sophos product(s) and version(s) SafeGuard Device Encryption
The SGNRollback tool (which is available in the "tools" folder of the product delivery) can be started from a recovery system, either WindowsPE 2.0 or BartPE, to repair a broken installation. The process is mostly automated.
Parameters: -drv WinDrive drive letter with SafeGuard Enterprise installation to be repaired This parameter can only be used in recovery mode and has to be used on multi-boot environments where it is not possible for the tool to find the correct drive itself.
The SGNRollback tool can only repair an unsuccessful endpoint installation if the following pre-conditions are true:
After starting the SGNRollback tool from the recovery system the first step is:
After the first step is finished the user is asked to remove the recovery device. After this the machine will be rebooted into the Safe Mode of the operating system:
The SGNRollback tool is deployed as a single executable without installation.
The end user is responsible for integrating the SGNRollback tool into the recovery system (WindowsPE or BartPE). It can be started manually in the recovery system or added to the autostart of the recovery system.
Tous les commentaires envoyés sont lus par un membre de notre équipe. En revanche, nous ne répondons pas aux questions techniques spécifiques. Si vous avez besoin d'assistance technique, veuillez poser votre question sur notre communauté. Pour tous produits sous licence, veuillez ouvrir un incident support.