Adware/PUA False Positive for C:\Windows\WinExeSvc ??

As of today am getting a few of these myself.  They were not on access, but on a scheduled scan.  Though not getting it on all monitored machines?  Curious why this is getting flagged now?  Something in the latest update?  Is there a recommended course of action?  It's a Windows application, so don't know what is exactly expected to be done about it. 

Hi Dan,

Looks like Sophos have updated something in relation to this based on this that I found:

https://www.sophos.com/en-us/threat-center/threat-analyses/adware-and-puas/WinExeSvc.aspx

That's probably why it's suddenly showing up as part of a scheduled scan.

As you say a valid windows app so not a threat as such but I suppose it could be exploited as part of an attack.

Regards

Peter

Hi Dan,

Looks like Sophos have updated something in relation to this based on this that I found:

https://www.sophos.com/en-us/threat-center/threat-analyses/adware-and-puas/WinExeSvc.aspx

That's probably why it's suddenly showing up as part of a scheduled scan.

As you say a valid windows app so not a threat as such but I suppose it could be exploited as part of an attack.

Regards

Peter