Malware or potentially unwanted applications in quarantine Status

Hi,

I opened a support ticket and it was confirmed that the events.db had to be deleted in order to clear up the warning.

I have created a simple script that must be executed on the client to clear this.

Hope it will help other people as well.

Hi,

I opened a support ticket and it was confirmed that the events.db had to be deleted in order to clear up the warning.

I have created a simple script that must be executed on the client to clear this.

Hope it will help other people as well.

The service "Sophos Health service" cannot be stopped. Have I run this script as SYSTEM? Or have I disable "Tamper protection"?

With regards,

Hi,

you have to run the script as admin if the user does not have the relevant rights.

It stops the service

Hi Jiri, 

Tamper Protection has to be disabled before we try to disable any Sophos AV services.

I just started using central and I've run into this problem already.  Why isn't this built into the product?  Why force the user to do a song and dance by disabling tamper protection and running a script with admin privileges on the client?

I think that this problem ISN´T solved since now. It HAVE to be some REMOTE solution to this - from Sophos console. It is VERY annyoning.

Hi Jiri Hadamek 

I certainly understand your concern, but as of now, it is not possible to perform the above-mentioned steps from Sophos console. I would suggest you raise a feature request here. 

This is fixed alert issue. But this isn't solution to problem. We just used new empty event log file and EP responds based on that. Sophos must comeup with a solid solution instead of work arounds.