how to block Microsoft PsExec tool

Hello Todd Villeneuve,

psexec is detected as PUA since 2006.
What psexec basically does isn't really rocket science - any decent malware writer could come up with its basic and abused functionality in minutes. That a know tool is used stems from the fact that it's often used for system administration, software deployment and things like that. There's a chance that it is white-listed ...

Christian

Here's info on the Petya ransomware. Just make sure you do not have an exclusion on PsExec and PUA Detection should take care of the threat.

https://community.sophos.com/kb/en-us/127027