This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

PUA clean up and Console Update

I recently saw this alert in the Sophos console about a PUA. Here is the alert content below.

What happened: We could not clean up a potentially unwanted application (PUA).

Where it happened: ACC08

Path: C:\Windows\PSEXESVC.exe

What was detected: PsExec

User associated with device: SA\acc08

How severe it is: Medium

What Sophos has done so far: We attempted to clean up a PUA.

What you need to do: In the Sophos Central Admin console, go to the Alerts page and find the PUA alert. Click on the PUA name to see details and cleanup advice on the Sophos website. Then go to the affected computer and clean up the PUA manually.

 

I performed the clean up manually and ran the Update on the client in Sophos, but the console still shows the yellow triangle on the device.

How can I clear the yellow triangle alert on the device in the console?

I saw this document in the knowledge about deleting the event database, but why can't Sophos perform the clear in the console by itself?

Thanks.



This thread was automatically locked due to age.