"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
This article explains how to use SGNRollback.exe to repair a failed SafeGuard Enterprise installation.
Apply to the following Sophos product(s) and version(s) SafeGuard Device Encryption
The SGNRollback tool (which is available in the "tools" folder of the product delivery) can be started from a recovery system, either WindowsPE 2.0 or BartPE, to repair a broken installation. The process is mostly automated.
Parameters: -drv WinDrive drive letter with SafeGuard Enterprise installation to be repaired This parameter can only be used in recovery mode and has to be used on multi-boot environments where it is not possible for the tool to find the correct drive itself.
The SGNRollback tool can only repair an unsuccessful endpoint installation if the following pre-conditions are true:
After starting the SGNRollback tool from the recovery system the first step is:
After the first step is finished the user is asked to remove the recovery device. After this the machine will be rebooted into the Safe Mode of the operating system:
The SGNRollback tool is deployed as a single executable without installation.
The end user is responsible for integrating the SGNRollback tool into the recovery system (WindowsPE or BartPE). It can be started manually in the recovery system or added to the autostart of the recovery system.
Tutti i commenti qui inseriti vengono letti (dal team di supporto), ma non verranno inviate risposte specifiche ad alcun quesito tecnico. Nel caso richiediate supporto tecnico, vi invitiamo a postare il vostro quesito nella nostra community. Altrimenti, se la richiesta di supporto riguarda un prodotto con licenza, vi invitiamo ad aprire un ticket per il team di supporto.