could you provide at least some details? In case of an apparently successful malware the console version (and also the SAV version) is all but irrelevant. What happened, how many endpoints are affected, what is it that you want to remove, which files have to be recovered?
console 5.4.0 cant detect ransomware to avoid misconceptions: It is never the console that detects something, it's always the (AV) software on the endpoint. Though SEC 5.5+ is required to be able to download and manage the additional (license required) EXP product (ransomware protection, exploit prevention, Clean)
