I recently saw this alert in the Sophos console about a PUA. Here is the alert content below.
What happened: We could not clean up a potentially unwanted application (PUA).
Where it happened: ACC08
Path: C:\Windows\PSEXESVC.exe
What was detected: PsExec
User associated with device: SA\acc08
How severe it is: Medium
What Sophos has done so far: We attempted to clean up a PUA.
What you need to do: In the Sophos Central Admin console, go to the Alerts page and find the PUA alert. Click on the PUA name to see details and cleanup advice on the Sophos website. Then go to the affected computer and clean up the PUA manually.
I performed the clean up manually and ran the Update on the client in Sophos, but the console still shows the yellow triangle on the device.
How can I clear the yellow triangle alert on the device in the console?
I saw this document in the knowledge about deleting the event database, but why can't Sophos perform the clear in the console by itself?
Thanks.
This thread was automatically locked due to age.